Available for remote roles & contracts

WordPress
& WooCommerce
Developer.

I build custom plugins, WooCommerce extensions and API integrations, and harden sites against OWASP findings. 4+ years of production work for clients across the US, UK, and UAE.

View Projects Get In Touch
US · UK · UAE clients UTC+5 · Mirpur, AJK Remote · Full-time or Contract
About

I turn complex requirements into clean systems.

Muhammad Ayaz
Muhammad Ayaz
WordPress & WooCommerce Developer
Mirpur, AJK, Pakistan · UTC+5

I'm a WordPress and WooCommerce developer with 4+ years of production experience, based in Mirpur, AJK, Pakistan. I build custom plugins, WooCommerce extensions and API integrations, and I harden sites against OWASP findings. I also deliver Shopify Liquid sections and Laravel applications.

I own projects from requirements through deployment and handoff: scoping with clients, setting technical direction, building the solution, and handling client communication through launch.

I've delivered for clients in the US, UK, and UAE across logistics, healthcare, retail, and education. I write OOP PHP, design relational schemas, and build REST APIs — and the foundation comes from a BS in Information Technology, graduated with distinction.

4+
Years of production WordPress & WooCommerce development
10+
Custom WooCommerce plugins built in OOP PHP
6
Production systems shipped across 4 industries in 9 months
0
Data-loss incidents across 2 live PHI-handling intake forms
Technical Stack

What I work with.

WordPress & WooCommerce

Custom Plugins Custom Themes Hooks & Filters WP-Cron REST API WooCommerce WC Subscriptions Gutenberg Blocks WP-CLI Multisite

Page Builders & Content

Elementor Pro ACF JetEngine Divi LearnDash

Integrations & APIs

REST API SOAP/XML OData Gravity Forms Zapier Google Maps API HubSpot GoHighLevel Webhooks

Performance & SEO

Transient Caching Change Detection Yoast SEO GTM / GA4

Security

OWASP Remediation CSP / HSTS CSRF Nonces Cloudflare AES-256-CBC

Backend & Tools

PHP 8 / OOP MySQL / wpdb Laravel Composer Git Linux / SSH Shopify / Liquid JavaScript (ES6+) jQuery AJAX
Featured Work

Systems I've built.

Logistics / WooCommerce

Vehicle Shipment Quote Engine

Full-stack quoting platform for a USA-to-Africa logistics company. Replaced a brittle CSV + functions.php system with a namespaced OOP plugin — 3 relational DB tables, complete abstraction layer, and 15 AJAX endpoints with transient caching. Integrates Gravity Forms, transport REST API, Google Maps Geocoding, Zapier, and WooCommerce checkout injection. Later extended with VIN-based freight-API field mapping and a rebuilt shipping-ports transit table.

Quote turnaround cut from ~24 hours to under 30 seconds.

  • PHP 8
  • WooCommerce
  • REST API
  • Google Maps
  • Gravity Forms
  • Zapier
Automation / Retail

Luxury Retail Inventory Sync

Two-phase encrypted inventory sync engine for a luxury watch retailer. Fetch phase authenticates via AES-256-CBC per-request signatures, paginates the full catalogue, and upserts to a custom staging table with fingerprint-based change detection. Push phase creates/updates WooCommerce products with image sideloading and Yoast SEO injection, behind a pricing tier gate preventing dangerous underpricing on ultra-luxury pieces. Hardened in production: diagnosed a never-emptying WP-Cron queue and moved stock status to WooCommerce's own setter.

~2,000 SKUs kept updated nightly. Fingerprint diffing cut sync writes by ~90%.

  • AES-256-CBC
  • WooCommerce
  • WP-Cron
  • ACF
  • Yoast
Integration / Healthcare

Healthcare Job Board Sync Engine

Dual-feed synchronisation engine for a US healthcare staffing company. Merges OData REST and SOAP/XML ATS feeds into a single WordPress CPT with zero duplicates — SOAP/XML transformation layer parsing HTML-entity-encoded inner envelopes, DST-aware WP-Cron scheduling, and incremental syncs between full wipe-and-reimport cycles. Extended with a BrassRing feed on its own custom table and UTM-safe job filters.

Two incompatible ATS feeds (OData and SOAP/XML) merged into one CPT with zero duplicates, on a DST-aware cron.

  • PHP
  • SOAP/XML
  • OData
  • WP-Cron
  • Custom DB
Education / WooCommerce

WooCommerce Subscriptions Pricing Engine

Gravity Forms + WooCommerce Subscriptions per-seat pricing engine for an education platform. Dynamic recurring pricing calculated from a Gravity Forms enrolment field, overriding the recurring price across cart, checkout, subscription creation, and renewal orders. Later fixed a recurring-price double-count and coupons being cancelled by a late pricing override on the subscription line item.

Per-seat recurring pricing applied consistently across cart, checkout, subscriptions and renewals.

  • WC Subscriptions
  • Gravity Forms
  • PHP
  • WooCommerce
Healthcare / Forms

Patient Intake Integration

Gravity Forms + API patient intake plugin with dynamic document uploads, NPI field mapping, insurance image handling, conditional form sections, and full API call logging. PHI-aware data handling across 2 live intake forms. Every API request/response pair is searchable in a DataTables admin screen so support can debug without a developer.

Ran on 2 live PHI forms with zero data-loss incidents and searchable API logging for audit traceability.

  • Gravity Forms
  • PHP
  • API Logging
  • NPI Mapping
LMS / Frontend

LearnDash Membership Dashboard

Custom membership dashboard on a Divi-based gated page — shortcodes rendering user-specific LearnDash course lists, progress states, and earned certificates dynamically per logged-in user. Queries LearnDash user course data and certificate post meta, rendering conditionally based on enrolment status and completion. Extended with WooCommerce Memberships content-restriction filters and a custom thank-you message linking to the member dashboard.

Replaced 4 separate member pages with one dynamic, per-user dashboard of courses, progress and certificates.

  • LearnDash
  • Divi
  • PHP
  • WP Post Meta
Events / Ticketing

Bookmyhouseparty.com

Built from scratch: a full event ticketing and booking platform with custom booking logic, payment flow and ticket generation. Delivered as project lead, from scoping and technical direction through launch.

Launched on schedule with live bookings from day one.

  • PHP
  • WordPress
  • Payments
  • Booking Logic
Integration / Laravel

Laravel Portal to WordPress Bridge

Integrated a Laravel management portal with a WordPress frontend via a secure REST API for Griffin Rock Cat Retreat. Also connected WordPress lead forms to Copper CRM via Zapier for another client.

Eliminated double-entry for the client's operations team; CRM automation saved ~3 hours/week of manual entry.

  • Laravel
  • REST API
  • Zapier
  • Copper CRM
Security / WordPress

OWASP Audit Remediation

Triaged a third-party OWASP vulnerability report line by line into a prioritised plan, then implemented it: a Content-Security-Policy allow-listing only the site's real third-party scripts, HSTS, X-Frame-Options and X-Content-Type-Options headers, and CSRF nonces on flagged forms.

Each finding in the report verified against the new headers and nonce implementation.

  • CSP
  • HSTS
  • Nonces
  • Cloudflare
Shopify / Subscriptions

Recharge Subscription Add-to-Cart

AJAX add-to-cart flow for a multi-variant Shopify product (flavor, bag quantity, delivery frequency). Parses the live product's variant and selling-plan data and resolves the selected variant and Recharge selling plan before submitting, following Recharge's own documentation.

Part of wider Shopify work: Liquid sections, metafield-driven pricing, and Admin GraphQL template updates.

  • Shopify
  • Liquid
  • Recharge
  • AJAX
A note on client confidentiality

This is a selected sample. Many further client plugins and themes are confidential — the code, the brand, and the business logic stay private. What I can always discuss openly is the shape of the problem and how I solved it: the requirement, the constraints, the architecture I chose and why. Happy to walk through any of it in an interview or a call.

Experience

Where I've worked.

  1. Oct 2025 — Present

    Senior WordPress, WooCommerce & Shopify Developer

    Metafoid · Remote

    Own full-stack plugin projects for US and international clients, from requirements to production.

    • Shipped 6 production systems across 4 industries in 9 months, each replacing a manual or spreadsheet process.
    • Built a vehicle-quote platform (WooCommerce, Gravity Forms, Google Maps, Zapier) that cut quote turnaround from ~24 hours to under 30 seconds.
    • Built an encrypted inventory sync for a luxury retailer keeping ~2,000 SKUs updated nightly; fingerprint diffing cut sync writes by ~90%.
    • Merged two incompatible ATS feeds (OData and SOAP/XML) into one CPT with zero duplicates on a DST-aware cron.
    • Remediated a third-party OWASP report with CSP, HSTS, frame/content-type headers and CSRF nonces, then verified each finding.
    • Built a WooCommerce Subscriptions per-seat pricing engine for an education platform, overriding recurring prices across cart, checkout, subscription creation and renewals.
    • Delivered patient intake integrations on 2 live PHI-handling forms with zero data-loss incidents and searchable API request/response logging.
    • Built a LearnDash membership dashboard that replaced 4 separate member pages with one dynamic, per-user view.
    • Delivered Shopify Liquid sections, metafield-driven pricing, Admin GraphQL template updates and a Recharge subscription add-to-cart flow.

    Stack: PHP 8, WordPress, WooCommerce, Gravity Forms, REST/SOAP/OData, WP-Cron, Shopify/Liquid, LearnDash, AES-256-CBC

  2. Dec 2024 — Oct 2025

    Project Lead / WordPress & PHP Developer

    Developers Hub (Pvt.) Ltd · Islamabad, PK
    • Built Bookmyhouseparty.com from scratch: a full event ticketing and booking platform with custom booking logic, payment flow and ticket generation. Launched on schedule with live bookings from day one.
    • Integrated a Laravel management portal with a WordPress frontend via secure REST API (Griffin Rock Cat Retreat), eliminating double-entry for the client operations team.
    • Connected WordPress lead forms to Copper CRM via Zapier, saving ~3 hours/week of manual entry and improving pipeline visibility.
    • Delivered 4 custom themes from scratch (semantic HTML5, CSS3, responsive); all passed client UAT on first review with no revision cycle.
    • Led delivery on client projects: scoped requirements, set technical direction and handled client communication through launch and handoff.

    Stack: PHP, WordPress, Laravel, REST API, Zapier, Copper CRM, JavaScript, CSS3, HTML5

  3. Jan 2024 — Dec 2024

    PHP WordPress Developer | Technical Support Engineer

    EBRIDGE · Islamabad, PK
    • Resolved plugin clashes, compatibility conflicts and performance bottlenecks on production WooCommerce installs used by thousands of global customers, using PHP error logs, debugging tools and local environment replication.
    • Handled escalated cases other support tiers could not: API misconfiguration, checkout breakage and theme/plugin conflicts, often reproducing and fixing issues hands-on in staging.
    • Authored knowledge-base articles, troubleshooting guides and video walkthroughs that reduced repeat tickets by standardising resolution paths.
    • Reported bugs to developers with reproduction steps, flagged structural issues and contributed to plugin stability improvements and release QA.
    • Documented user-specific edge cases that revealed patterns the dev team had not caught in internal testing, refining the plugin release process.

    Stack: PHP, WordPress, WooCommerce, error logs, debugging tools, REST API, customer support systems

  4. Mar 2023 — Jan 2024

    PHP WordPress Developer

    EBRIDGE · Islamabad, PK
    • Built 10+ custom WooCommerce plugins in OOP PHP to WordPress coding standards: checkout enhancements, dynamic pricing, variation extensions and custom admin UIs.
    • Used JetEngine, ACF, custom taxonomies and meta fields for product configurators, conditional pricing and variation-heavy catalogues.
    • Refactored plugin architecture (named hook references, standardised sanitisation and validation, selective asset loading), measurably improving load times.
    • Ran pre-release QA against the latest WordPress, WooCommerce and PHP versions and major themes/builders (Elementor, Divi, Flatsome); tightened nonce and capability checks to cut post-release bugs.
    • Collaborated across teams to keep plugins compatible through rapid WordPress/WooCommerce release cycles without regressions.

    Stack: PHP 7.4+, WooCommerce, OOP, hooks and filters, JavaScript, CSS, Elementor, JetEngine, ACF

  5. Oct 2021 — Feb 2023

    Web Developer

    Kiebit · Mirpur, PK
    • Built secure Laravel applications with schema design and migrations, query optimisation and caching, and protection against SQL injection and CSRF.
    • Refactored legacy code and worked directly with clients to build full-stack solutions around real business operations, including secure authentication.
Education

Where I learned the fundamentals.

Graduated Jul 2021 · With Distinction

BS in Information Technology

Mirpur University of Science & Technology (MUST) · Mirpur, AJK
  • Built a strong foundation in web development, database management and software engineering that underpins my plugin architecture and schema design work today.
  • Final-year project: Laravel School Management System with role-based access, attendance, grading and fee modules.
Student societies

Tech Societies & Student Groups

MUST · Mirpur, AJK
  • Active in tech societies and student groups.
  • Helped organise workshops, tech talks and hackathons that introduced students to emerging technologies and built development skills.
Achievements

Work worth pointing at.

Open Source

wp-quote-engine

Public reference plugin demonstrating production WordPress architecture: namespaced OOP and a versioned REST API. Written to be read, not just run.

View on GitHub →
Open Source

wp-inventory-sync

Public plugin implementing AES-256-CBC request signing and fingerprint-based change detection to skip unchanged records — two problems that break most real-world sync integrations.

View on GitHub →
Academic

Graduated with Distinction

BS Information Technology, MUST (Jul 2021). Final-year project — a Laravel School Management System with role-based access, attendance, grading and fee modules.

Professional

Zero-Incident PHI Deployment

Delivered patient intake integrations across 2 live healthcare forms handling protected health information — no data-loss incidents, with searchable API request/response logging for audit traceability.

Professional

Launched On Schedule

Led Bookmyhouseparty.com from scratch — custom booking logic, payment flow and ticket generation — and launched on schedule with live bookings from day one.

Professional

First-Review UAT Passes

Delivered 4 custom themes from scratch (semantic HTML5, CSS3, responsive); every one passed client UAT on first review with no revision cycle.

Contact

Let's build something.

Have a WordPress or WooCommerce project that needs an engineer who understands the backend? Available for remote full-time roles, contracts, and freelance projects.

mayazwd2@gmail.com github.com/webindustry059 LinkedIn