I will hackproof your wordpress by converting it to a static site


About this gig
In October 2026, two unauthenticated RCE flaws in PHP itself (CVE-2026-109618/109619, CVSS 9.2) put every WordPress site at risk. Updating WordPress doesn't patch PHP - and security plugins can't help, because the attack lands before your site's code runs.
The structural fix: stop serving PHP to the public.
I'm the developer of Pinery Static, a plugin that exports your WordPress site to plain HTML and deploys it to Cloudflare Pages. With this gig I do the whole conversion for you:
- Full export + deployment of your site as static HTML
- Your own domain switched to the static copy
- Comments, search and forms keep working
- WooCommerce supported (Premium): static product pages, live prices and checkout
- One-click rollback, nothing on WordPress is changed
You keep editing in WordPress exactly as before - it stays on your hosting as the backend. Visitors (and attackers) only ever meet static files: no PHP, nothing to exploit.
Honest note: the backend still needs its updates. What disappears is the public attack surface.
Message me before ordering if you're unsure - I reply fast.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know CM LIU
WordPress to Static Site Specialist Cloudflare Pages
- FromChina
- Member sinceNov 2023
- Avg. response time2 hours
- Last delivery1 week
Languages
English, Chinese
My Portfolio
Other Website Maintenance Services I Offer
FAQ
Is a static site more secure than a regular WordPress site?
Security note: a static site has no PHP running in public — vulnerabilities like the October 2026 PHP core RCEs (CVE-2026-109618/109619, CVSS 9.2) simply have nothing to exploit on your live site.
Do I still need to update WordPress and PHP?
Yes. Your WordPress stays online as the backend (admin, forms, dynamic features), and it should stay patched. What the conversion removes is the public attack surface — visitors and attackers never touch PHP at all.
Will my forms, comments and shop keep working?
Yes. Comments, search and forms are proxied back to your WordPress (Standard and up). WooCommerce product pages go static while prices, stock, cart and checkout stay live (Premium).
What do you need from me to start?
WordPress admin access and a Cloudflare account. For Standard/Premium, a Pinery Static Plus/Pro license (available on pinery.pro) — message me first and I'll confirm exactly what your site needs.
What if something goes wrong?
Nothing inside WordPress is modified by the switch, and rolling back is one click — your domain is served by WordPress again in seconds.

