
WordPress Site Hacked? What to Do and How to Recover
A practical recovery guide for business owners: confirm the hack, protect visitors, preserve your data and check the site before reopening.
A new page is almost ready. The marketing team wants a different headline, the manager thinks the second section is too long and someone spotted a wrong phone number in the page footer. The feedback arrives through three emails, two chat messages and one phone call. Half of it gets lost before anyone opens the editor.
Since WordPress 6.9, there is a simpler way to handle WordPress collaboration. Notes let your team leave feedback directly on the content it refers to, inside the editor.
This guide covers what WordPress Notes are, how to use them, who can see them and how to make them part of your everyday workflow.
WordPress Notes are comments that your team leaves inside the block editor, attached to specific parts of a post or page. If you have used comments in Google Docs, the idea will feel familiar.
According to the official WordPress documentation, Notes were introduced in WordPress 6.9 and expanded in WordPress 7.1. In 6.9, every note is attached to a whole block. Notes on selected text and some other features need 7.1. If your site runs an older version, you will not see Notes at all. Our guide on how to safely update to the latest WordPress version explains how to check your version and update without risk. If your site has a lot of plugins or custom code, test the update on a staging site first.
Notes are not visible to your website visitors. The documentation is clear on this: “Notes are only visible in the editor to users who can edit the post.”
There are two ways to add a note.
This works in WordPress 6.9 and newer.
The block now shows an indicator that a note is attached. If a block already has a note, choosing Add Note again starts a separate thread, so different topics on the same block do not get mixed up.
If you have been looking for WordPress inline comments, this is the closest built-in option. It requires WordPress 7.1.
The selected text stays highlighted, which helps when the feedback is about a single sentence or word inside a longer block.
To make sure the right person sees your note, mention them:
The mentioned user gets an email notification.
Each note works as a conversation thread:
To see every note on a page in one place, including resolved ones, use the Notes button in the top toolbar of the editor.
Access to notes follows the same rules as editing the post:
| User role | What they can do |
| Administrator | View and add notes on all posts and pages |
| Editor | View and add notes on all posts and pages |
| Author | View and add notes on their own posts |
| Contributor | View and add notes on their own posts |
| Subscriber | No access to notes |
In practice, this means a client with an Editor account can review any page, while a guest writer with a Contributor account sees only notes on their own drafts.
This also means every old Editor or Administrator account can still read your team’s notes. If you are not sure who still has access, a quick WordPress user access audit will tell you.

By default, WordPress sends an email when:
If your team leaves a lot of notes, the emails can add up quickly. You can change this under Settings → Discussion, in the “Email me whenever” section, with the option “Anyone posts a note”.
If notification emails do not arrive at all, the cause is usually the same as with forms, so run the same checks as for a contact form that is not sending emails.
A few limitations are worth knowing before you plan your workflow around Notes:
Notes are simple, but a few habits make them much more useful:
| Email and chat | WordPress Notes | |
| Where feedback lives | Spread across inboxes and channels | Next to the content it refers to |
| Context | “The second paragraph” (which one?) | Attached to the exact block or text |
| Status | Hard to tell what is done | Open or resolved |
| History | Lost in long threads | Available in the editor |
| Who sees it | Whoever was copied in | Everyone who can edit the post |
Notes will not replace every conversation, but for feedback about specific content, they remove a lot of back-and-forth. And since they are built into WordPress, teams that used a separate editorial comments plugin may be able to work with one less plugin.
WordPress Notes are comments that users leave inside the block editor, attached to a block or to selected text. They help teams discuss changes without leaving WordPress.
No. Notes are visible only in the editor, and only to users who can edit the post.
Notes were introduced in WordPress 6.9, released in December 2025. WordPress 7.1 added more advanced features, including notes on selected text.
Go to Settings → Discussion and uncheck “Anyone posts a note” in the “Email me whenever” section.
Only if the theme or plugin that registers the post type enables them. If you do not see Notes on a custom post type, a developer can add support.
Notes work best on an up-to-date site where user roles match how your team actually works. If your site is still on an older WordPress version, uses custom post types without Notes support, or gives everyone the same admin account, 24WP can help with the update and maintenance, the user roles and the setup.
Your 24wp website is developed by experts from Cubes — an IT company that has been creating complex IT ecosystems and stable web systems for a decade.
Visit cubes.rs