Javier Carazo (@carazo) – WordPress user profile

Bio

I am CEO and co-founder of Codection. We develop WordPress and WooCommerce plugins and we offer specialized service for WordPress owners, mainly custom develops and optimizations.

WordPress Origin Story

I knew WordPress when a colleague tell me he had a better solution to do a blog than the one we used then, Drupal. After it, I created Linux Hispano Juegos, a blog about gaming in Linux; and later we moved Linux Hispano to WordPress (before it worked with phpNuke, Mambo, Joomla! and Drupal).

Then I started to be more interested in this technology and I write a book about it “WordPress: Manual Básico” (editorial Ra-Ma). Maybe the first book about WordPress in Spanish.

After it I continue focused in it and then, Alberto Hornero and me founded Codection and we start to sell services with WordPress from the first day. And I continue here, now CEO of the company and coding everyday.

Badges

CODE

2 badges

Core Contributor '22 Plugin Developer

COMMUNITY

1 badge

WordCamp Speaker '14

PRACTICE

1 badge

Support Contributor '26

POLYGLOTS

1 badge

Translation Contributor '20

Current Job

WordPress Engineer

Present

Codection

Recent impact

Score weights high-impact work (commits, releases, approved translations, props) at 3x routine activity.

Last 30 days

13contributions

high8

medium5

score29

Last 90 days

51contributions

high27

medium24

score105

Last 12 months

184contributions

high70

medium114

score324

WordPress releases

Contributed to 2 releases

Contributions

Type

October 2026

Oct 25 Sun · 22:18

Forums med

Posted a reply to Change Password, on the site WordPress.org Forums:
Hi, thanks for the detailed report and for testing on a clean site, it made…

Oct 25 Sun · 22:10

Plugins high

Committed [3765290] to Plugins SVN:
1.20.1: add missing change-password.php template (missing since 1.17)

Oct 23 Fri · 21:58

Plugins high

Committed [3762498] to Plugins SVN:
Version 2.5.9 - Security fix: block privilege escalation via CSV export/re-import (NUL escape character breaking cell quoting) + option to keep extra profile fields from previous imports and remove them individually + fix str_getcsv deprecation notice on PHP 8.4+

Oct 23 Fri · 21:57

Forums med

Posted a reply to Feat Req : Option to keep/merge existing custom meta fields on new CSV import, on the site WordPress.org Forums:
Hi, Thank you so much for your kind words, and for using and recommending the…

Oct 18 Sun · 08:15

Forums med

Posted a reply to Forced password change query, on the site WordPress.org Forums:
Thanks to you for reporting the problem with bbPress.

Oct 17 Sat · 21:54

Forums med

Posted a reply to Forced password change query, on the site WordPress.org Forums:
Hi, Thanks for reporting this, you were right. The forced password change always sent users…

Oct 17 Sat · 21:51

Plugins high

Committed [3752386] to Plugins SVN:
Version 2.5.8: the force password change option now sends users to their BuddyPress settings page or bbPress profile edit page (new bbPress addon) instead of wp-admin/profile.php when those plugins are active, so the back end can stay private; the flag is now removed whenever the user really changes their password from any place (BuddyPress, bbPress, WooCommerce My Account, lost password form), not only from wp-admin/profile.php, and the change password notice is also shown on the BuddyPress and bbPress pages

Oct 09 Fri · 10:18

Plugins high

Committed [3736387] to Plugins SVN:
Version 0.8: security fix, purchase restrictions now apply to variations and are re-checked on add to cart and checkout (incl. Store API); tested up to WP 7.1.3 and WC 11.2

Oct 02 Fri · 15:20

Plugins high

Committed [3725059] to Plugins SVN:
Version 2.5.7: security fixes - a create_users-only user could change other users' roles via the Cron tab without promote_users and updated users could lose all their roles (2.5.6), and a create_users-only user could save the Cron tab with their own import file and let the recurring import run as an administrator to take over admin accounts; imports now run as the user who configured the cron when they cannot edit_users

Oct 02 Fri · 10:16

Plugins high

Committed [3724544] to Plugins SVN:
Version 2.5.6 - Security fix: saving the Cron tab now requires promote_users to set Update roles for existing users to anything other than No or to enable Change role of users that are not present in the CSV, and the importer no longer removes the existing roles of updated users when the user running the import cannot assign roles