Joe Youngblood’s report surprised me because I didn’t realize our conservative sanitize_username approach doesn’t apply to registrations when you’re not in multi-site mode. https://x.com/YoungbloodJoe/status/2118795342875431305 We should assume every CRUD attempt is hostile. Where else can we tighten up the range… Continue Reading →
A portfolio that only shows thumbnails is easy to ignore. Clients and prospects want to see proof, including engagement stats. That means your project grid has to do more than look like a gallery. People should be able to search… Continue Reading →
A compass, a coffee cup, and a riverside marker can give a walking guide its own visual language. But which collection holds the right symbols when it’s time to add another route? The Icon Manager in Divi 5 puts our… Continue Reading →
Divi Notes brings feedback, conversations, and assigned tasks directly into Divi 5. Attach a note to an element, discuss the change with your team, and resolve it when the work is complete. 🎉 It’s also a great way to leave… Continue Reading →
A vague headline or a generic “Learn More” button can leave visitors unsure what you offer. With Divi AI Agents in Divi 5, you can revise headlines, service descriptions, and calls to action across a page from one conversation. Choose… Continue Reading →
Last week, there were 549 vulnerabilities disclosed in 351 WordPress Plugins and 4 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 222 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
Building a website often means repeating the same instructions across different pages. We ask for sections that match existing styles, revisions that preserve approved content, and layout checks before a client review. With Divi AI Agent Commands, we can save… Continue Reading →
On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing several security issues, most notably an Unauthenticated Remote Code Execution vulnerability in WordPress core, identified as CVE-2026-119977. The vulnerability affects… Continue Reading →
With WordPress 7.2 launching in December, a new default theme is on the way. Marking a departure from tradition, it drops the usual calendar-year naming scheme in favor of a more meaningful name. Dubbed Ipsum, this new addition is a… Continue Reading →
You may have noticed the new shiny icons in the admin screens in WordPress 7.2 Beta. As previously announced on Replacing Dashicons in the admin bar and menu, the icons in the admin bar and menu are now inline SVGs… Continue Reading →
Maybe not your content per se, but the ability to discover it is with the introduction of the /random/ endpoint in WordPress 7.2. A request to example.com/random/ will lead end users to a randomly selected published post. The feature is… Continue Reading →
Editing repeated elements individually takes time, especially when they need the same design adjustments. Divi 5’s Multi-Select and Bulk Editing let us select several elements, change their settings together, and apply actions to the selection. We’ll explain how selection works,… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, November 05, 2026 at 08:30 PM GMT+5:30 Announcements WP A11y Docs update October 2026 WordPress 7.2 Beta 4 released Nov 3rd, 2026 Beta 5 scheduled for Nov 10th 7.1.4 Security… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, November 4, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting focuses on upcoming releases and Core development, with time for discussions and open floor. If you… Continue Reading →
X-post from +make.wordpress.org/community: Flagship WordCamps on WP.org/news
Repeated edits can slow down a Divi build: matching button styles, correcting placeholder copy, checking phone spacing, and opening module after module to make the same change. Divi AI Agents let you describe those changes in the Divi 5 Visual… Continue Reading →
WordPress 7.2 Beta 4 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test… Continue Reading →
On Thursday, December 3, 2026, pricing for Wordfence Premium, Care, and Response will increase. We’re announcing this change a month in advance so you have time to purchase new licenses or renew eligible subscriptions at current pricing. Existing licenses can… Continue Reading →
X-post from +make.wordpress.org/marketing: Updates to the WordPress Marketing Repository
Imagine your agency manages the WordPress help center for an appointment-booking software company. Customers keep asking support how to reschedule recurring appointments. The instructions already exist, but a search for “move my Friday bookings” doesn’t lead to the guide. The… Continue Reading →
“What’s new in Gutenberg…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with… Continue Reading →
A useful filter sidebar gives visitors clear choices without taking over the page. This free pack includes five styled Post Filter sidebars for Divi 5, each paired with a matching content loop. Import a section and adapt its controls to… Continue Reading →
On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unofficial names, including HTTP2Shell, Node2Shell, and Brotli2Shell. Despite the first name, the flaw… Continue Reading →
This update informs you about: Remaining documentation for wpaccessibility.org. Accessibility Team Handbook on GitHub. Preparations for publication of the docs on developer.wordpress.org Remaining documentation for wpaccessibility.org In October Rian wrote the remaining content listed in the Tracking issue Content pages:… Continue Reading →
On October 21, 2026, attackers were already targeting websites with requests designed to exploit two critical PHP vulnerabilities known as PHP2Shell. The official security patches weren’t available yet, but our engineering and security teams were already working to protect Kinsta-hosted… Continue Reading →
X-post from +make.wordpress.org/core: Exploring a design for Feature Notifications
You’re ready to test a WooCommerce extension update. AI helps you work through the release notes, and you have a draft test plan open. Then a colleague asks whether the update affects any custom checkout rules. You know a few… Continue Reading →
Visibility lag is the gap between a change existing in WordPress and that change reaching an end user. The edit is in the database or on disk, but visitors still get the old bytes. It compounds because a WordPress production… Continue Reading →
This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click… Continue Reading →
X-comment from +make.wordpress.org/ai: Comment on WordPress for the Agentic Web
