The Presence API meeting took place on Monday, October 12, 2026 at 15:00 UTC in #feature-presence-api. It also hosts the real-time collaboration (RTC) work. This week’s focus was the feature plugin merge criteria, and which gaps are left before a… Continue Reading →
On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported sixteen days earlier. It is tracked as CVE-2026-39919 and carries a CVSS score of… Continue Reading →
Since WordPress 7.1 the Toolbar is also displayed in the Post Editor and the Site Editor (#65091, dev note). That change made an old problem more visible: the first two items of the Toolbar, the W and the site name,… Continue Reading →
It’s official; the beta phases have ended, and Divi 5 has arrived. This isn’t the end; it’s a new beginning for Divi, and we are moving forward faster than ever with weekly updates. If you use Divi 5, you’ll see… Continue Reading →
In the last update, your watchlist stopped living on one device. Turn on iCloud sync and it follows you from your phone to your iPad. But it was still your list. After making sure that watchlists are actually available in… Continue Reading →
Grid Offset Rules control where items begin and how many rows or columns they span in Divi 5. A rule on the container can widen every fifth card, stretch a featured item across two rows, or place an item in… Continue Reading →
Feature Notifications is the project exploring a unified notifications system for WordPress (#43484). It has been quiet since version 0.2.0 shipped in April 2023. This post covers where the project stands today and the plan to get to version 0.3.0,… Continue Reading →
Divi Components and Slots have arrived, introducing a completely new way to build reusable designs in Divi 5. 🎉 This is one of the most important updates to Divi since Variables and Presets! Components are the evolution of Divi’s Global… Continue Reading →
WordPress 7.2 adds NO_BACKSLASH_ESCAPES to the list of SQL modes that WordPress doesn’t support. WordPress already turns off some modes, such as STRICT_ALL_TABLES, TRADITIONAL and ANSI, when it connects to the database. This mode is now on that list too…. Continue Reading →
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026)
Last week, there were 501 vulnerabilities disclosed in 367 WordPress Plugins and 9 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 201 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
“I think we might lose public key cryptography.” ~Matthew Green The above is from Matthew Green, yesterday, who is a cryptographer at Johns Hopkins. OpenAI released over 700 mathematical proofs as a github repository yesterday. They’ve since withdrawn 3 of… Continue Reading →
When a page has several buttons, a request like “update the button in the pricing section” can leave room for interpretation. Divi AI Agents can work with your page structure, but attaching the exact element makes your target clearer. Context… Continue Reading →
A web design degree used to be the obvious way to learn the craft. Now it’s competing with YouTube, AI, and people who spend those same years actually building things — so if universities can’t offer something better, students have… Continue Reading →
Bot traffic is becoming a bigger part of the web, and a bigger consideration for anyone managing a website. That was reinforced by Kinsta’s analysis of more than 10 billion requests in a year when AI-driven bot traffic was reported… Continue Reading →
Since its inception, WordPress has relied on the KSES1 subsystem to sanitize HTML. Its purpose has grown and changed over time, but primarily serves two purposes: correct aesthetic defects that are likely the result of typos or pasting errors; and… Continue Reading →
The purpose of this proposal is to introduce minor changes to the WordPress CSS Coding Standards required to integrate Stylelint into Core. Please keep any feedback focused on the scope of these minor changes. On Trac ticket #29792 a proposal… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, October 08, 2026 at 08:30 PM GMT+5:30 WP Accessibility Day 2026 takes place online on October 7–8, 2026 (today), featuring 24 hours of free talks on digital accessibility and WordPress…. Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, October 7, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting will focus on the discussion for upcoming releases, and have an open floor section. The various… Continue Reading →
Dark mode toggles are everywhere, but do users actually need them, or are designers designing for other designers? A growing UX debate is questioning whether that little sun-and-moon button deserves permanent space in your website’s header.
This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPress.org, or visit your WordPress Dashboard,… Continue Reading →
The full chat log is available beginning here on Slack. WordPress Performance Trac tickets @westonruter shared that prefetching has finally been committed in changeset 64120. The next step is to default script and style concatenation to off outside development environments… Continue Reading →
A large word can become more than typography when the image or texture behind it becomes part of the letterforms themselves. In this free pack, you’ll get 7 Text Background Clip Sections for Divi 5, using oversized type, imagery, contrast,… Continue Reading →
WordPress 7.2 is scheduled for release on December 8, 2026! Below is the proposed calendar with expected start times for each release party, and the release squad contributors involved in release parties for the upcoming 7.2 milestone. This release party… Continue Reading →
Deleting your entire production database and backups is not something a human will do often, but it is possible for an AI agent running under strict instructions. A credential mismatch within the codebase is not something an agent will check…. Continue Reading →
Every upload field on your WordPress site is a way in for malware. attachmentAV scans files sent through popular form plugins and the Media Library with Sophos, rejecting anything infected before it reaches your site, your inbox or your clients…. Continue Reading →
X-comment from +make.wordpress.org/accessibility: Comment on Accessibility-ready directory changes coming!
Work is largely completed for making the accessibility-ready tag conditional in the theme directory, as proposed in meta trac ticket #8427. There’s a little bit more work to be done to set up the changes, which is going to briefly… Continue Reading →
Divi 5‘s Payment Button Module lets you accept payments through PayPal or Stripe without setting up a full online store. Add the module to your page, connect your payment resource, and style the button in the Visual Builder. Visitors then… Continue Reading →
Over the last few days, there have been a few actions taken on Trac and in the WordPress GitHub organization that are aimed at clarifying who is looking after areas of the project, and making it easier for contributors to… Continue Reading →
GraphComment Review: A Smarter and Feature-Rich WordPress Comment System
WordPress’ comments system is okay for very niche scenarios, but you’ll need greater flexibility and depth of functionality to pare down your moderation queue. My GraphComment review looks at a solution that includes numerous moderation and community engagement options, powered… Continue Reading →