Available now for remote full-stack, WordPress and backend roles
Full-Stack Engineer · WordPress, React, Python · Remote
150,000+ active installs · AI integration and infrastructure
I build WordPress plugins and Gutenberg blocks, and the Python services behind them. Four years of it now: PHP and React inside the plugins, Python, Postgres and Redis on the servers behind them. Last year I built the service behind Everest Forms' AI form builder and put it into production.
150,000+
Active installs
Across the plugins I worked on, per WordPress.org
8
Products released
Form builders, memberships, blocks, email
97/100
Average rating
1,228 reviews, weighted per plugin
4+ yrs
Years working
PHP, Python, TypeScript, since July 2022
150,000+ sites run a feature I shipped. Everest Forms 90,000, User Registration 50,000.
Built and deployed the Python service behind Everest Forms' AI form builder.
Four gateways in two products: PayPal, Stripe, Mollie and Authorize.Net.
52 fixes across nine plugins, from unauthenticated privilege escalation to SQL injection.
Linux and Docker in production, with Postgres, Redis and Nginx underneath.
Gutenberg blocks in React, Elementor widgets and two WooCommerce extensions.
I'm a full-stack engineer based in Nepal. I build WordPress plugins, the kind of thing people install once and then forget about, so most of what I write has to keep working for years on sites I will never see.
I started in January 2023 as an intern on the User Registration team and stayed until October 2026. In that time I shipped features in Everest Forms and User Registration, built SmartSMTP out through its first releases, and worked on blocks in BlockArt and Magazine Blocks.
Most of my time went on the money path and the security side. Money and accounts are the two things people cannot forgive you for getting wrong.
Last year I moved further down the stack: Python, Postgres, Redis and Docker in production rather than just read about. That has become the part of the job I like most, and it is the work I am looking for next.
50,000+ installs, rated 96/100 by 828 people
Registration, login and paid memberships for WordPress: a builder for sign-up fields and roles, content restriction, membership plans, and payments through Stripe, PayPal, Mollie, Authorize.Net or bank transfer.
Most of my work here is on the money path. Every gateway has its own webhooks, retries and quirks, and when one fails quietly somebody has paid and not been given what they paid for, or has been charged twice. That is the part I look after.
My part
Moved PayPal onto its REST API with webhooks and stricter IPN checks, fixed Stripe charging the wrong currency when a plan had no local price, stopped Mollie retries charging twice, and added signature checks and a retry flow to Authorize.Net. I also built the content drip module and the membership upgrade flow. On the security side I patched unauthenticated privilege escalation and user deletion, arbitrary shortcode execution through user-controlled smart tags, a PayPal flaw that let an attacker mark a pending payment as completed without paying, a forged gateway on free memberships, an open redirect after login, SQL injection in the analytics date filters, a stored XSS in the analytics journey table, and an unauthenticated request that could force-log-out any user. 273 commits across core and pro
90,000 installs · 98/100 rating
A drag-and-drop form builder with payments, quizzes and add-ons.
A whole pro tier of add-ons hangs off it, and forms people built years ago still have to open and submit correctly, so a lot of the work is in not breaking them.
Its newest feature builds a whole form from a sentence describing what you need. That part runs through a service I designed and built: the plugin sends the request to us, we check the site's licence and its limits, ask the model, and make sure the answer is a valid form before the plugin touches it. No API key is ever shipped inside the plugin.
My part
The AI form builder end to end: the gateway in Python and FastAPI with Postgres and Redis on Docker, the prompt setup, and the WordPress side that calls it. Before that, the divider field and multiple-select support, styling for the lookup field, range slider and single-item options in calculations, and 17 security fixes: blocking an unsafe unserialize call on old PHP, nonce verification across forms on one page, sanitisation and escaping, entry permissions and file-upload capability checks. 492 commits across the free and pro plugins
AI gateway is my employer's
2,000 installs · 303 of 331 commits
Email sending for WordPress that tells you when it fails.
One main SMTP connection with a backup behind it, setup for the common providers, a test email you can send before anything is configured, and a log of what actually went out.
My part
I built most of this one, from the early versions through its first public releases: the main and fallback connections, provider setup, test mail, attachment handling, the delivery log, the hand-off from User Registration, and a stored XSS fix in the mail log viewer
My own plugin · 188 of 188 commits
Runs PHP, JavaScript, CSS or HTML snippets without editing theme files.
It runs on any site without touching a theme file. There is a proper code editor, it checks the syntax on both the server and in the browser, lets you choose where each snippet runs, and imports and exports as JSON. If a PHP snippet throws a fatal error it is caught and switched off, so one bad snippet cannot take the site down.
My part
All of it: the idea, the structure, the admin screens, the safety model and the build setup
Not yet in the plugin directory
Commercial WordPress plugin, 18 commits mine
A plugin for running content campaigns across a large set of subdomains.
I came in for a run of features in early 2026: live search through a self-hosted SearXNG instance, AI featured images that print the article title onto the image and embed IPTC metadata, bulk category editing and campaign exports moved into background jobs, CSV export for selected subdomains, iframe post scheduling, and a database refactor that added the indexes the campaign tables were missing.
My part
The search integration, the AI image pipeline, the background job and export work, and the database indexing refactor
Private repo, commercial plugin
10,000+ installs · 98/100 rating
A library of Gutenberg blocks with ready-made sections and templates.
Every setting has to keep rendering the same way on pages built long before the current version.
My part
Fixed a vulnerability in the counter block, and made the colour picker offer the theme's own palette
6,000 installs · 98/100 rating
Blocks for news and magazine sites: post grids, sliders, tickers and an ad system.
All of them pull posts through WP_Query behind the editor, so the block settings and the query have to stay in step.
My part
Block features in both the free and pro plugins, fixes for unescaped output and an insecure nonce, capability checks on editor actions, and I cut the 1.8 release. 81 commits across the two
Paid extension on WooCommerce.com
A drag-and-drop builder for the WooCommerce registration form.
Custom fields, validation and admin management, running on stores I never get to see.
My part
Built the file upload field end to end, at checkout, in the dashboard user screen and for multiple files, plus the phone field, the first and last name smart tags, PHP 8 fixes and repairs to the email templates. 70 commits
Paid on WooCommerce.com, free on WP.org
Rebuilds the WooCommerce My Account area without touching a theme.
A store owner gets custom endpoints, tabs and groups, different navigation layouts, and a customiser that shows each change as you make it.
My part
The colour palette manager, the navigation layout and menu position controls, live previews for every control, support for the older style engine, a warning before you leave with unsaved changes, and the 2.0.1 release. 162 commits
Static Next.js · ~85 kB of JavaScript
One page of static HTML, with two themes from a single set of CSS variables.
No colour is written into a component, there is no animation library, and all the text lives in one typed file so nothing drifts out of sync.
My part
The design, the tokens, the accessibility pass and the words
Every number comes from the commit history of the plugin it names.
492
commits in Everest Forms
Free and pro, including the AI form builder
303 of 331
commits in SmartSMTP
Built it from early versions to its first releases
273
commits in User Registration
Core and pro, most of it on payments
52
security and hardening fixes
Across nine plugins, from privilege escalation to SQL injection and stored XSS
4
payment gateways
PayPal, Stripe, Authorize.Net and Mollie
188 of 188
commits in my own plugin
SnippetCrate, start to finish
I joined the User Registration team as an intern, was contributing to the plugin within two weeks, and moved into the engineer role a month later. From there I worked across seven WordPress products with about 150,000 sites between them.
Backend work on Oxole, a site where students swapped textbooks.
Visvesvaraya Technological University, Bangalore. This is where I first wrote PHP and learned databases, which turned into the job I have now.
Open to remote full-stack, WordPress engineering and backend or Python work. Email is the fastest way to reach me, and I usually answer within a day.
Sarawal-6, Nawalparasi, Nepal · UTC+5:45 · remote-friendly · +977-9807445408