WordPress Cheat Sheet 2026

The 30 highest-yield WordPress facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What WordPress function outputs the blog's name as set in General Settings? → bloginfo('name')
2. A client wants to store their customers' credit card numbers in a custom WordPress database table. What is the professional response? → Advise against it and recommend PCI-compliant payment processors like Stripe or PayPal
3. What is the purpose of the WordPress beta tester plugin? → It allows switching to beta or nightly builds of WordPress core
4. Which WordPress feature allows an editor to preview changes before publishing so they can share feedback with the developer? → Preview Changes / staging URL
5. What security risk is introduced by using nulled (pirated) WordPress themes or plugins? → They commonly contain backdoors and malicious code that can compromise the entire site
6. Why is evidence-based practice important in WordPress? → It integrates best available evidence with professional expertise for optimal outcomes
7. Which approach to WordPress content planning is MOST aligned with evidence-based practice for growing organic search traffic? → Using keyword research data and search intent analysis to guide topic selection
8. When performing QA on a WordPress REST API endpoint, which HTTP status code confirms a resource was successfully created? → 201 Created
9. In the WordPress Loop, which function outputs the current post's title as HTML? → the_title()
10. A WordPress developer discovers a security vulnerability in a popular plugin during client work. What is the professional action? → Responsibly disclose it to the plugin author and/or the WordPress security team
11. What is the default WordPress database table prefix? → wp_
12. Which file in a WordPress installation contains the database credentials and requires the most careful protection? → wp-config.php
13. What is the primary competency framework for WordPress professionals? → Structured competency standards defined by the certifying body
14. What is the minimum required header comment in a WordPress plugin file? → Plugin Name:
15. When conducting A/B testing on a WordPress site's call-to-action button, what is the minimum recommended sample size principle before declaring a winner? → Reach statistical significance (typically p < 0.05) with adequate sample size
16. When evaluating the reliability of a source cited in a WordPress blog post, which indicator is the STRONGEST evidence of credibility? → The source is peer-reviewed and published in an indexed journal
17. Which template hierarchy file takes precedence for a single post of custom post type 'product'? → single-product.php
18. What does enabling 'Search Engine Visibility' discourage in WordPress Settings > Reading? → Search engines from indexing the site by adding a noindex header
19. What does the 'transient' API in WordPress primarily use for storage by default? → The WordPress options table in the database
20. Which WordPress function should you use to safely output user-submitted data in HTML attributes? → esc_attr()
21. What does WP-CLI stand for and what is its main use? → WordPress Command Line Interface, used to manage WordPress from the terminal
22. When using Google Search Console data integrated with WordPress, which metric best indicates that a page's content is mismatched with searcher intent? → High impressions but low click-through rate (CTR)
23. Which WordPress plugin category is most commonly used to collect quantitative user behavior data directly on your site? → Analytics & tracking plugins
24. Which standard practice demonstrates professional code quality in a custom WordPress plugin? → Following WordPress Coding Standards and prefixing all functions, hooks, and classes
25. Which file is required in every WordPress child theme? → style.css
26. Which WordPress capability allows a user role to install and activate plugins? → install_plugins
27. On a WordPress site publishing academic-style content, which schema markup type is MOST appropriate for marking up a research article? → ScholarlyArticle
28. Which method allows a WordPress developer to share a staging site with a stakeholder for review without making it publicly accessible? → Password-protect the staging environment or use a staging plugin with access control
29. What does the WP_Query class allow plugins to do in WordPress? → Run custom database queries to retrieve posts with specific parameters
30. A QA engineer notices that a plugin enqueues scripts on every page, including admin pages where they are not needed. What is the correct fix? → Wrap wp_enqueue_script() with an is_admin() check (or its inverse)