On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub… Continue Reading →
On August 11th, 2026, we received a submission for an Unauthenticated Account Takeover vulnerability in TranslatePress, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for unauthenticated attackers to obtain an administrator’s password reset link,… Continue Reading →
This week I Share My Recap From WordCampUS 2026 [powerpress]
X-comment from +make.wordpress.org/accessibility: Comment on Help shape the Accessibility Lab plugin
Introducing the Accessibility Lab plugin! The plugin aims to offer a combination of Core related experiments and practical tools that solve shared problems for all to benefit from. The goal is not to move accessibility fixes out of Core and… Continue Reading →
On August 10th, 2026, we received a submission for an Unauthenticated Privilege Escalation vulnerability in Pods, a WordPress plugin with more than 100,000 active installations. This vulnerability allows unauthenticated attackers to escalate their privileges to administrator and perform various administrator… Continue Reading →
On July 24th, 2026, we received a submission for an Unauthenticated Arbitrary File Upload vulnerability in Elementor Pro, a WordPress plugin with an estimated 6,000,000 active installations. This vulnerability makes it possible for unauthenticated attackers to upload arbitrary files, including… Continue Reading →
On July 14th, 2026, we received a submission for an Unauthenticated Arbitrary File Upload vulnerability in Forminator Forms, a WordPress plugin with more than 600,000 active installations. This vulnerability makes it possible for unauthenticated attackers to upload arbitrary files, including… Continue Reading →
This week I Talk About If Your WordPress Site AI-Ready? [powerpress]
This week I Share My 650th Episode Retrospective [powerpress]
The Plugins Team is aware of an issue currently affecting plugin releases and is actively investigating it. At this time, newly released plugin ZIP files are not being generated as expected. We are also aware that some users are experiencing… Continue Reading →
This week I Talk About The 2026 WordPress Website Redesign [powerpress]
This week I Share An Update: Three Months After the Layoff [powerpress]
This week I Talk About Optimizing the Wrong Things! [powerpress]
This week I Convince You To Prepare For Black Friday in June! [powerpress]
This week I Talk About The 2026 Mid-Year Business Checkup [powerpress]
A truly successful WordPress stack comes down to balance. You need robust hosting, clean code, and plugins that are lightweight and built for a specific purpose. The strongest sites don’t use plugins as a crutch for weak infrastructure. Instead, they… Continue Reading →
This week I Talk About The Summer Slow Down Myth [powerpress]
This week I Talk About The Business Around WordPress [powerpress]
This week I Talk About The Business of Open Source [powerpress]
This week I Share My Interview With David Stone [powerpress]
A WPProAtoZHost.com Company…. Today I am talking about unpopular ideas in WordPress today and I have a New Plugin review, some News tips, plugin extras and more all coming up on Plugin Pulse: WP Plugins A to Z Unplugged. Welcome… Continue Reading →
This week I’m Talking About Domain Investing & The Myth of Easy MRR! [powerpress]
A WPProAtoZHost.com Company…. Today I have a New Plugin review, some News tips, plugin extras and more all coming up on Plugin Pulse: WP Plugins A to Z Unplugged. I am talking about unpopular ideas in WordPress today and I… Continue Reading →
