Visibility lag is the gap between a change existing in WordPress and that change reaching an end user. The edit is in the database or on disk, but visitors still get the old bytes. It compounds because a WordPress production… Continue Reading →
TL;DR: As of October 28, 2026, Wordfence is not aware of any WordPress site compromised through PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We continue to see PHP2Shell-related requests across the more than 5 million sites we protect. Those requests show ongoing scanning… Continue Reading →
This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click… Continue Reading →
A resource section can share one introduction across several pages while presenting different content beneath it. Reusing both the section and its cards lets you maintain those designs separately. With Components and Slots in Divi 5, you can combine those… Continue Reading →
X-comment from +make.wordpress.org/ai: Comment on WordPress for the Agentic Web
X-comment from +make.wordpress.org/ai: Comment on WordPress for the Agentic Web
AI makes plugin features cheap to copy. Here are the 10 ways it attacks a WordPress plugin business and the 8 moats that still hold, with a self-test for each. The post “How AI Threatens WordPress Plugin Businesses, and the… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, October 28, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting focuses on upcoming releases and Core development, with time for discussions and open floor. If you… Continue Reading →
I’m excited to introduce a new level of flexibility for Divi 5 variables: combine them, nest them within other variables, and use them directly in calculations within your settings. 🎉 Create spacing relationships that stay connected as your design changes…. Continue Reading →
Think you know Google? Think again—hidden deep within that simple search bar is a subterranean network of secret search operators, hidden diagnostic tools, and buried privacy toggles that change everything. From listening to your saved voice logs to uncovering secret… Continue Reading →
WordPress 7.2 Beta 2 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test… Continue Reading →
By the end of the afternoon, you have a working WordPress plugin. With some help from AI, it sends form submissions to your client’s CRM and emails a confirmation. You show the client. They like it. Can it go live… Continue Reading →
Handle EU VAT in WooCommerce for free, including validating VAT numbers, applying reverse charge, switching at the €10,000 threshold, and building your OSS return with VAT Right. The post “How to Handle EU VAT and OSS in WooCommerce for Free… Continue Reading →
For each WordPress release, a roadmap is pulled together to share what’s planned and provide opportunities for folks to contribute. Over the last three years, these posts have taken roughly the same shape and approach, with some variation around the… Continue Reading →
Divi 5 has a new way to build pages in the Visual Builder: Divi AI agents. Instead of working through settings panels one change at a time, you describe what you want in a conversation, and the agent carries it… Continue Reading →
When a new threat to WordPress sites emerges, the first hours matter most. Today we’re introducing the Wordfence Threat Response Team, led by Alex Thomas and made up of some of our most experienced researchers and threat analysts. It’s a… Continue Reading →
Shopify, Squarespace, Webflow, Framer, Ghost, AI site builders and Cloudflare’s EmDash: where each WordPress alternative fits in 2026, and where WordPress still wins. The post “WordPress Alternatives in 2026: Which Ones Are Really Worth It?” first appeared on WP Mayor.
WordPress and Astro can both power a blog, portfolio, or business website, but they give you different starting points. WordPress includes a content management system with an editing dashboard, user accounts, and a media library. Astro is a web framework… Continue Reading →
Most grid layouts fill every available cell. Leaving some cells empty can create a more interesting composition, with space that guides the eye through the content. With CSS Grid in Divi 5, Grid Offset Rules let you position items precisely… Continue Reading →
Last week, there were 497 vulnerabilities disclosed in 327 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 218 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
TL;DR: WordPress Contributor Toolkit v2.0.0 has been released with a new interface built on the WordPress Design System, a settings dialog, a dark theme, and translations into ten languages. The WordPress Contributor Toolkit removes the points of friction first-time contributors… Continue Reading →
Building faster in the Divi 5 Visual Builder means spending less time opening panels and repeating the same setup. The Command Center handles actions you can name, such as adding modules, applying presets, and opening settings. Workspaces save the panel… Continue Reading →
On October 21, 2026, two critical PHP vulnerabilities, collectively known as PHP2Shell, were publicly disclosed. These vulnerabilities could allow attackers to execute malicious code on affected servers without authentication. The PHP development team released emergency security updates the same day… Continue Reading →
This week was more of a maintenance week: 24 PRs merged, 23 of them Dependabot updates, The more interesting activity is in review: 16 new contributor PRs opened this week. Highlights README now points to the demo plugin (#648, @psykro):… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th… Continue Reading →
On October 21, 2026, the PHP project disclosed two critical vulnerabilities that can allow unauthenticated remote code execution on affected web servers. Both vulnerabilities received a CVSS v4.0 score of 9.2. CVE-2026-109618 CVE-2026-109619 Pagely deployed initial mitigations while preparing updated… Continue Reading →
On October 21st, 2026, the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. We warned site owners before the fixes became available and followed up after our team reviewed the vulnerability details and began… Continue Reading →
I’m excited to introduce the Icon Manager for Divi 5, a central place to import your own icons, organize them into collections, and choose which collections appear while you build. 🎉 Bring in custom SVGs or an icon font, create… Continue Reading →
Reddit’s biggest controversies are platform-design lessons in disguise. From GameStop and API protests to misinformation, moderator revolts, and online witch hunts, each one shows what happens when community systems fail under pressure.
You install a free plugin, spend twenty minutes setting it up, and hit run. It works. Then, on the third item, or the eighth day, or the one button you actually needed, it stops and asks for your credit card…. Continue Reading →
