The Wordfence Threat Intelligence Team identified an interesting malware sample in mid June during a site clean. The malware was installed as a must-use plugin with several self-healing mechanisms in place in order to survive removal. It also makes use… Continue Reading →
This week I Share My Interview with Elijah Mills [powerpress]
Pulling your images and video from a separate server can boost your performance, but no two of the leading options charge for it the same way. In this comparison, we look at six WordPress media offload plugins to help you… Continue Reading →
On February 20th, 2026, a critical Unauthenticated Arbitrary File Upload vulnerability was publicly disclosed in WooCommerce Wholesale Lead Capture, a premium WordPress plugin with an estimated 6,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary… Continue Reading →
On August 21 and August 22, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, identified two independent critical vulnerability chains in The Events Calendar, a WordPress plugin active on more than 600,000 websites. Both chains begin in the… Continue Reading →
Figma is turning a wild idea into reality: instead of searching for the perfect plugin, you can just ask AI to build it. If this catches on, designers may stop choosing the tools in their software—and start inventing them on… Continue Reading →
Ask an AI coding agent to fix a WordPress site, and you’ll likely get a solution to copy, paste, and test it yourself. As such, every fix is really just an educated guess dressed up as code. This Novamira review… Continue Reading →
The Accessibility Lab plugin was announced on August 21st, and now that WordPress 7.1 is wrapped up, it’s time to start scoping out the first features to target for release. For an initial discussion, we’ll meet on Thursday, September 17,… Continue Reading →
We’re launching an automated security review for every plugin release. Before a release is distributed through the WordPress.org update API, it is analyzed for security issues and releases that are considered to pose a potential security risk (either intentional or… Continue Reading →
This week I Talk About The Next WordPress Job Titles [powerpress]
This week I Talk About Accessibility After Launch [powerpress]
This week I Share My Recap From WordCampUS 2026 [powerpress]
Introducing the Accessibility Lab plugin! The plugin aims to offer a combination of Core related experiments and practical tools that solve shared problems for all to benefit from. The goal is not to move accessibility fixes out of Core and… Continue Reading →
This week I Talk About If Your WordPress Site AI-Ready? [powerpress]
This week I Share My 650th Episode Retrospective [powerpress]
The Plugins Team is aware of an issue currently affecting plugin releases and is actively investigating it. At this time, newly released plugin ZIP files are not being generated as expected. We are also aware that some users are experiencing… Continue Reading →
This week I Talk About The 2026 WordPress Website Redesign [powerpress]
This week I Share An Update: Three Months After the Layoff [powerpress]
This week I Talk About Optimizing the Wrong Things! [powerpress]
This week I Convince You To Prepare For Black Friday in June! [powerpress]
This week I Talk About The 2026 Mid-Year Business Checkup [powerpress]
A truly successful WordPress stack comes down to balance. You need robust hosting, clean code, and plugins that are lightweight and built for a specific purpose. The strongest sites don’t use plugins as a crutch for weak infrastructure. Instead, they… Continue Reading →
This week I Talk About The Summer Slow Down Myth [powerpress]
This week I Talk About The Business Around WordPress [powerpress]
