Start of the meeting in Slack, facilitated by @audrasjb See the agenda post. Announcements 7.2 We have a Proposal: Secrets API for WP 7.2 We are still waiting for a release squad to be published, probably early next week as per @jeffpaul… Continue Reading →
The Instagram Feed Module brings Instagram galleries directly into Divi 5. Connect an account, choose how many posts to display, and style the resulting feed directly inside the Visual Builder. One of the module’s biggest advantages is how deeply it… Continue Reading →
“What’s new in Gutenberg…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with… Continue Reading →
On August 19th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Elementor Pro, a WordPress plugin with more than 6,000,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including executable… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, September 2, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. Dev chat is back on Wednesdays again! The live meeting will focus on the discussion for upcoming releases, and… Continue Reading →
WordPress SEO has long revolved around focus keywords and meta descriptions. Those elements still matter, but they don’t automatically make a site easy for AI engines to interpret and cite. This ByTheWeb AI review looks at a free GEO plugin… Continue Reading →
Image optimization has always been the one piece of the media stack that refused to come inside. Infinite Uploads has just pulled it in, and it happens at the CDN edge without touching a single original file. The post “WordPress… Continue Reading →
Since WordPress 7.1 was released, contributors have kept a close eye on incoming reports to the WordPress.org Support Forums, Trac, and the Gutenberg repository on GitHub. The volume and severity of tickets mean that the maintenance release should be prepared habitually. This release will be co-led by @adamsilverstein,… Continue Reading →
On August 9th, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, discovered an Arbitrary File Upload vulnerability in Gravity Forms, a WordPress plugin estimated to have more than one million active installations. This high-severity vulnerability makes it possible… Continue Reading →
Divi 5 makes it easy to introduce the people behind your brand with team sections that feel intentional, polished, and visually distinctive. In this free pack, you’ll get 9 Creative Team Sections for Divi 5 that are perfect for agencies,… Continue Reading →
On August 14th, 2026, we received a submission for an Unauthenticated Second-Order SQL Injection vulnerability in All-in-One WP Migration and Backup, a WordPress plugin with more than 5 million active installations. This vulnerability makes it possible for unauthenticated attackers to… Continue Reading →
When someone wants to know whether a brand is trustworthy, searching the brand name up isn’t the first option anymore. They ask an LLM to compare it against alternatives, check Reddit, look at some review aggregators, or even see whether… Continue Reading →
X-comment from +make.wordpress.org/security: Comment on Updates to the WordPress Vulnerability Disclosure Program
Ever noticed that signing in takes one tap, but logging feels like solving a puzzle?That’s not bad design. It’s a business strategy. The modern internet has quietly turned “leave” into the hardest button to find—and most people never realized it… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. Announcements Help shape the Accessibility Lab plugin WordPress 7.1 “Mary Lou” was released on August 19th as scheduled!… Continue Reading →
A dynamic blog grid needs two things to work well together: content that can change and a layout that can keep up with it. New posts get published, categories grow, and the number of items returned by a query changes… Continue Reading →
What if your WordPress site could help visitors find the content they need, and help you figure out what to write about next? The secret to a successful WordPress blog is creating content that’s highly useful and relevant to your… Continue Reading →
A WordPress AI plugin that writes a paragraph on request is common enough by now. My Aimogen Pro review looks at what happens if a plugin can also read a site, decide what needs doing, and act on it through… Continue Reading →
With: new and updated documentation, an explanation of the accessibility-ready program, a complete sitemap for users, our plans for September. New and updated documentation Standards and best practice section: New topic: Disappearing toast notifications in Design patterns to avoid. Proud… Continue Reading →
Divi 5‘s Loop Builder lets you turn Divi elements into dynamic feeds for posts, products, projects, custom post types, and other queried content. You design one repeated item, connect it to Dynamic Content, and let Divi populate the layout from… Continue Reading →
Divi 5 includes a native icon system that makes icons easy to add and style throughout the Visual Builder. For projects that need a much larger selection, Divi Sensei Icons by Divi Sensei expands that same workflow with thousands of… Continue Reading →
You’re updating a service page, swapping out a few paragraphs, and you hit Save. Ten minutes later, someone spots that the original copy had an approved legal disclaimer. Suddenly, you need that earlier version back. This is exactly the kind… Continue Reading →
X-comment from +make.wordpress.org/security: Comment on The Core Security Initiative
A blog grid can look perfectly aligned while you’re designing it with placeholder content, then fall apart as soon as real posts start loading in. One author uploads a wide screenshot, another uses a portrait photo, and somebody else adds… Continue Reading →
When you create an AI agent that makes a breakthrough that is so difficult to understand that you need to ask it to write a blog post to explain it to you, you know you’re on to something. If you’re… Continue Reading →
On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub… Continue Reading →
We’re proud to announce that WordPress has signed Open Weights and American AI Leadership, an open letter asking US policymakers to not place early restrictions on open weight AI models. These are artificial intelligence models that anyone can download, inspect,… Continue Reading →
Last week, there were 240 vulnerabilities disclosed in 184 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 105 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
Most credibility advice focuses primarily on your content. This values real experiences, credentialed authors, original research, and relying on humans across anything AI-assisted. All of that is correct and should already be on your checklist. What it misses is that… Continue Reading →
You build the homepage first. Then an about page, then a contact page. By the third one, you have the rhythm of it: drop in a section, add your content, style it, publish. One page, one design. Then you get… Continue Reading →
