Last week, there were 655 vulnerabilities disclosed in 406 WordPress Plugins and 100 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 236 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
Components in Divi 5 let you reuse a design, update it from one saved source, and choose which content each use can change. We’ll build three service cards for Brand Identity, Web Design, and Creative Direction. They share their spacing,… Continue Reading →
The Macintosh didn’t always smile. Susan Kare gave it one — and with a handful of black pixels, helped transform the computer from an intimidating machine into something that felt human. More than 40 years later, we’re still speaking the… Continue Reading →
On September 17th, 2026, we received a submission for a Second-Order SQL Injection vulnerability in Backuply, a WordPress plugin with more than 600,000 active installations. This vulnerability makes it possible for authenticated attackers with subscriber-level access and above to store… Continue Reading →
Publishing GenAI content is straightforward until the workflow diverges from its path. For example, a client can flag stale content a few weeks after publishing and want it fixed immediately. This requires the right checks and hosting infrastructure. Without them,… Continue Reading →
“What’s new in Gutenberg…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with… Continue Reading →
Reusable styles are only part of a design system. The way settings connect, combine, and update matters just as much once a site grows. In Divi 5, presets form a connected system: small groups of settings can feed into larger… Continue Reading →
70.4% of shoppers have abandoned a purchase over a slow or glitchy website AI does a lot of the shopping legwork now. People ask a chatbot for the best running shoes or a decent espresso grinder, get a shortlist, and… Continue Reading →
The native WordPress comment system gets you started, but it won’t build a community or keep spam in check on its own. Here’s how the leading commenting platforms compare on moderation, page speed, pricing and who really owns your comments…. Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. The biweekly Accessibility Team meeting was kept brief, with updates shared asynchronously, as WordPress Accessibility Day 2026… Continue Reading →
In Moving to a server-aware approach for collaboration, @chriszarate explains why the server needs to be at the heart of real-time collaboration, and introduces the engines we’ve been investigating to power the future of RTC. In this post, we’ll explore… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, October 14, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting will focus on the discussion for upcoming releases, and have an open floor section. The various… Continue Reading →
A strong hero section does more than introduce a page. It establishes the visual language, hierarchy, and direction for everything that follows. In this free pack, you’ll get 7 UI Hero Sections for Divi 5, built around bold interface-inspired compositions,… Continue Reading →
A polished portfolio used to get you hired. Now AI makes polished work cheap, and clients want proof you can solve problems, communicate clearly, and deliver today.
A customer sees one checkout page. Behind it, your WordPress site may contact several services to process payment, check inventory, calculate shipping, and update your CRM. Plugins make those connections easy to set up. They don’t always make it obvious… Continue Reading →
Most AI features in WordPress plugins still stop at generating text. B2BKing has gone further, letting an AI agent set up groups, pricing and visibility on a real B2B store, and it does it through official WordPress standards. The post… Continue Reading →
The Presence API meeting took place on Monday, October 12, 2026 at 15:00 UTC in #feature-presence-api. It also hosts the real-time collaboration (RTC) work. This week’s focus was the feature plugin merge criteria, and which gaps are left before a… Continue Reading →
On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported sixteen days earlier. It is tracked as CVE-2026-39919 and carries a CVSS score of… Continue Reading →
Since WordPress 7.1 the Toolbar is also displayed in the Post Editor and the Site Editor (#65091, dev note). That change made an old problem more visible: the first two items of the Toolbar, the W and the site name,… Continue Reading →
It’s official; the beta phases have ended, and Divi 5 has arrived. This isn’t the end; it’s a new beginning for Divi, and we are moving forward faster than ever with weekly updates. If you use Divi 5, you’ll see… Continue Reading →
In the last update, your watchlist stopped living on one device. Turn on iCloud sync and it follows you from your phone to your iPad. But it was still your list. After making sure that watchlists are actually available in… Continue Reading →
Grid Offset Rules control where items begin and how many rows or columns they span in Divi 5. A rule on the container can widen every fifth card, stretch a featured item across two rows, or place an item in… Continue Reading →
Feature Notifications is the project exploring a unified notifications system for WordPress (#43484). It has been quiet since version 0.2.0 shipped in April 2023. This post covers where the project stands today and the plan to get to version 0.3.0,… Continue Reading →
Divi Components and Slots have arrived, introducing a completely new way to build reusable designs in Divi 5. 🎉 This is one of the most important updates to Divi since Variables and Presets! Components are the evolution of Divi’s Global… Continue Reading →
WordPress 7.2 adds NO_BACKSLASH_ESCAPES to the list of SQL modes that WordPress doesn’t support. WordPress already turns off some modes, such as STRICT_ALL_TABLES, TRADITIONAL and ANSI, when it connects to the database. This mode is now on that list too…. Continue Reading →
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026)
Last week, there were 501 vulnerabilities disclosed in 367 WordPress Plugins and 9 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 201 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
“I think we might lose public key cryptography.” ~Matthew Green The above is from Matthew Green, yesterday, who is a cryptographer at Johns Hopkins. OpenAI released over 700 mathematical proofs as a github repository yesterday. They’ve since withdrawn 3 of… Continue Reading →
When a page has several buttons, a request like “update the button in the pricing section” can leave room for interpretation. Divi AI Agents can work with your page structure, but attaching the exact element makes your target clearer. Context… Continue Reading →
A web design degree used to be the obvious way to learn the craft. Now it’s competing with YouTube, AI, and people who spend those same years actually building things — so if universities can’t offer something better, students have… Continue Reading →
Bot traffic is becoming a bigger part of the web, and a bigger consideration for anyone managing a website. That was reinforced by Kinsta’s analysis of more than 10 billion requests in a year when AI-driven bot traffic was reported… Continue Reading →
