gistfile1.txt

- How to make WP run sites that aren't blog format (mid level)
- Custom post types/custom taxonomies (mid to senior)
- When to use a third party plugin and when to develop their own functionality (mid)
- What the risks are of using third party plugins (security, support, ongoing development) (mid to senior)
- The security risks of setting up and running WP. These are the basics <https://codex.wordpress.org/Hardening_WordPress>  (mid to senior)
- How to deal with performance/scaling issues (caching plugins like W3TC or implementing things like Varnish) (senior)
- Best practises for updating WP and plugins (mid to senior)
- SEO considerations (YoastSEO does almost everything you'd need to do). This could be part of the front end development (using good semantic markup in the HTML) (mid)
- How to deploy sites with minimal downtime (mid to senior)
- What to do when things go wrong and best practise backup strategies (mid to senior)
- Hosting considerations (cost vs performance vs security vs learning curve) (mid to senior)
- Offloading assets to a CDN/Static host (senior)
- An understanding of the WP database structure (posts, post_meta, terms and taxonomies etc) (mid)
- The dangers of XML-RPC (vs the benefits) (mid)
- Knowledge of services like Cloudflare (WAF security/performance benefits)  (mid to senior)
- Benefit of using Disqus for commenting (offloads a lot of page rendering requirements/improves cache performance) (mid)