Last week, there were 497 vulnerabilities disclosed in 327 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 218 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
TL;DR: WordPress Contributor Toolkit v2.0.0 has been released with a new interface built on the WordPress Design System, a settings dialog, a dark theme, and translations into ten languages. The WordPress Contributor Toolkit removes the points of friction first-time contributors… Continue Reading →
Building faster in the Divi 5 Visual Builder means spending less time opening panels and repeating the same setup. The Command Center handles actions you can name, such as adding modules, applying presets, and opening settings. Workspaces save the panel… Continue Reading →
This week was more of a maintenance week: 24 PRs merged, 23 of them Dependabot updates, The more interesting activity is in review: 16 new contributor PRs opened this week. Highlights README now points to the demo plugin (#648, @psykro):… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th… Continue Reading →
On October 21, 2026, the PHP project disclosed two critical vulnerabilities that can allow unauthenticated remote code execution on affected web servers. Both vulnerabilities received a CVSS v4.0 score of 9.2. CVE-2026-109618 CVE-2026-109619 Pagely deployed initial mitigations while preparing updated… Continue Reading →
On October 21st, 2026, the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. We warned site owners before the fixes became available and followed up after our team reviewed the vulnerability details and began… Continue Reading →
I’m excited to introduce the Icon Manager for Divi 5, a central place to import your own icons, organize them into collections, and choose which collections appear while you build. 🎉 Bring in custom SVGs or an icon font, create… Continue Reading →
Reddit’s biggest controversies are platform-design lessons in disguise. From GameStop and API protests to misinformation, moderator revolts, and online witch hunts, each one shows what happens when community systems fail under pressure.
You install a free plugin, spend twenty minutes setting it up, and hit run. It works. Then, on the third item, or the eighth day, or the one button you actually needed, it stops and asks for your credit card…. Continue Reading →
With the introduction of the Abilities API and the AI Client, WordPress has evolved into a true execution engine, bridging your applications with the AI models of your choice. This monumental shift changes what the CMS is at its core…. Continue Reading →
On October 21, 2026, the PHP project released emergency updates for two critical vulnerabilities that can allow an unauthenticated attacker to run code through the PHP service handling website traffic. We first alerted WordPress site owners to these updates in… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, October 22, 2026 at 08:30 PM GMT+5:30 Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th Roadmap to 7.2 Help Test WordPress… Continue Reading →
The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can allow unauthenticated remote code execution. The PHP project says all PHP users are strongly encouraged to update immediately. We… Continue Reading →
Divi AI agents can build, edit, and restyle your pages from plain-language instructions. Quick edits can cost very little, while full layout generations and advanced multi-step tasks vary in cost depending on the models used and the work involved. We… Continue Reading →
The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP. Due to the critical severity of the issues, site owners are encouraged to immediately update their installations of PHP. Your web host may… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, October 21, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting focuses on upcoming releases and Core development, with time for discussions and open floor. If you… Continue Reading →
The PHP security team has issued advance notice of an upcoming critical security release, scheduled for Wednesday, October 21, 2026 at 14:00 UTC (10:00 AM Eastern). The release fixes two critical vulnerabilities, both rated 9.2 on the CVSS v4.0 scale…. Continue Reading →
On August 30, 2026, during internal research, the Wordfence Threat Intelligence Team discovered an Unauthenticated PHP Object Injection vulnerability in Duplicator and Duplicator Pro. Duplicator has more than one million active installations. The vulnerability is tracked as CVE-2026-82814 and carries… Continue Reading →
The full chat log is available beginning here on Slack. WordPress Performance Trac tickets @westonruter shared that, as of r64585, eliminating script/style concatenation has landed in WordPress and is included in the 7.2-beta1 release. This retires the use of load-scripts.php… Continue Reading →
Forget the same safe fonts you see on every other website. These five independent foundries are making typography weird, expressive and impossible to ignore—and they might convince you to never reach for Inter again.
This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features. How to… Continue Reading →
Divi AI Agents can help you understand your website as well as build it. With the Ask feature in Divi 5, you can ask about settings and layout approaches and get guidance based on the page you’re working on, all… Continue Reading →
AI is changing how WordPress developers work. It can generate code, help troubleshoot errors, explain unfamiliar APIs, and turn a plain-language request into a prototype. But producing code and deciding whether it belongs on a production website are different tasks…. Continue Reading →
Weglot 2.0 has launched for WordPress. It brings AI translations shaped by your Brand Voice, translates the text inside your images, and lets you manage translations from your AI assistant through Weglot MCP. We look at how it works, who… Continue Reading →
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was accessed and says that database contained connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, along with customer account… Continue Reading →
This post summarizes the feedback received from the WordPress 7.1 retrospective. Thank you to those who contributed their feedback via the retrospective survey and comments on the post! For ease of reading, feedback has been synthesized. Full feedback is available for… Continue Reading →
My menu bar fills up the same way a junk drawer does (as does most of you running macOS can likely attest). Every utility, sync client, and helper app adds an icon, and most of them are things I need… Continue Reading →
Almost any AI website builder can turn a short business description into a homepage. The real test comes later, when you need to restructure a section, update your branding, or add another page that feels like it belongs on the… Continue Reading →
How to Migrate From Disqus to GraphComment (and Set Up AI Moderation)
Plenty of sites use Disqus for WordPress comments, but GraphComment fixes many of its drawbacks. While migrating from Disqus to GraphComment sounds like an inconvenience, it’s straightforward and quick thanks to GraphComment’s intuitive usability. In this tutorial, I’ll show you… Continue Reading →