On August 30, 2026, during internal research, the Wordfence Threat Intelligence Team discovered an Unauthenticated PHP Object Injection vulnerability in Duplicator and Duplicator Pro. Duplicator has more than one million active installations. The vulnerability is tracked as CVE-2026-82814 and carries… Continue Reading →
The full chat log is available beginning here on Slack. WordPress Performance Trac tickets @westonruter shared that, as of r64585, eliminating script/style concatenation has landed in WordPress and is included in the 7.2-beta1 release. This retires the use of load-scripts.php… Continue Reading →
Forget the same safe fonts you see on every other website. These five independent foundries are making typography weird, expressive and impossible to ignore—and they might convince you to never reach for Inter again.
This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features. How to… Continue Reading →
Divi AI Agents can help you understand your website as well as build it. With the Ask feature in Divi 5, you can ask about settings and layout approaches and get guidance based on the page you’re working on, all… Continue Reading →
AI is changing how WordPress developers work. It can generate code, help troubleshoot errors, explain unfamiliar APIs, and turn a plain-language request into a prototype. But producing code and deciding whether it belongs on a production website are different tasks…. Continue Reading →
Weglot 2.0 has launched for WordPress. It brings AI translations shaped by your Brand Voice, translates the text inside your images, and lets you manage translations from your AI assistant through Weglot MCP. We look at how it works, who… Continue Reading →
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was accessed and says that database contained connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, along with customer account… Continue Reading →
This post summarizes the feedback received from the WordPress 7.1 retrospective. Thank you to those who contributed their feedback via the retrospective survey and comments on the post! For ease of reading, feedback has been synthesized. Full feedback is available for… Continue Reading →
My menu bar fills up the same way a junk drawer does (as does most of you running macOS can likely attest). Every utility, sync client, and helper app adds an icon, and most of them are things I need… Continue Reading →
Almost any AI website builder can turn a short business description into a homepage. The real test comes later, when you need to restructure a section, update your branding, or add another page that feels like it belongs on the… Continue Reading →
An image mosaic combines photographs of different sizes in one connected grid. Larger tiles highlight selected images, while smaller tiles fill the spaces around them. With Divi 5’s CSS Grid Editor, you can build this arrangement visually, resizing and positioning… Continue Reading →
Sometimes a reusable section needs more than a different heading or button label. One page might need a workshop schedule, while another needs a booking form. You still want the surrounding design to look consistent and update from one place…. Continue Reading →
Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. According to Rank Math, the affected version was downloaded or installed through an update between October 15, 2026 at 20:02 UTC and October 16,… Continue Reading →
Editing a website often means making the same change more than once. Adjust the spacing on several cards. Restyle a handful of buttons. Move a collection of modules into another column. Multi-Select and Bulk Editing bring those tasks together in… Continue Reading →
WordPress maintenance is the suite of operational tasks that prevent downtime and configuration drift on production systems. That definition holds whether you run one brochure site or 400 revenue-bearing properties. What changes with scale is who carries the risk when… Continue Reading →
A bento grid brings images, headlines, supporting details, and calls to action into one arrangement of differently sized cards. Shared edges and consistent gaps hold the layout together, while the larger cards give important content more room. With Divi 5‘s… Continue Reading →
This is the first in a series of weekly status update posts from the WP Feature Notifications work. Security PRS There are 30+ open Dependabot PRs that will resolve various dependency security alerts across the repository. It would be really… Continue Reading →
While the only actively supported version of WordPress is the most recent one, security updates are backported to older branches as a courtesy. All versions >=4.7 are in a security-only support state, receiving select security patches as a courtesy to… Continue Reading →
Last week, there were 655 vulnerabilities disclosed in 406 WordPress Plugins and 100 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 236 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
Components in Divi 5 let you reuse a design, update it from one saved source, and choose which content each use can change. We’ll build three service cards for Brand Identity, Web Design, and Creative Direction. They share their spacing,… Continue Reading →
The Macintosh didn’t always smile. Susan Kare gave it one — and with a handful of black pixels, helped transform the computer from an intimidating machine into something that felt human. More than 40 years later, we’re still speaking the… Continue Reading →
On September 17th, 2026, we received a submission for a Second-Order SQL Injection vulnerability in Backuply, a WordPress plugin with more than 600,000 active installations. This vulnerability makes it possible for authenticated attackers with subscriber-level access and above to store… Continue Reading →
Publishing GenAI content is straightforward until the workflow diverges from its path. For example, a client can flag stale content a few weeks after publishing and want it fixed immediately. This requires the right checks and hosting infrastructure. Without them,… Continue Reading →
“What’s new in Gutenberg…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with… Continue Reading →
Reusable styles are only part of a design system. The way settings connect, combine, and update matters just as much once a site grows. In Divi 5, presets form a connected system: small groups of settings can feed into larger… Continue Reading →
70.4% of shoppers have abandoned a purchase over a slow or glitchy website AI does a lot of the shopping legwork now. People ask a chatbot for the best running shoes or a decent espresso grinder, get a shortlist, and… Continue Reading →
The native WordPress comment system gets you started, but it won’t build a community or keep spam in check on its own. Here’s how the leading commenting platforms compare on moderation, page speed, pricing and who really owns your comments…. Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. The biweekly Accessibility Team meeting was kept brief, with updates shared asynchronously, as WordPress Accessibility Day 2026… Continue Reading →
How to Migrate From Disqus to GraphComment (and Set Up AI Moderation)
Plenty of sites use Disqus for WordPress comments, but GraphComment fixes many of its drawbacks. While migrating from Disqus to GraphComment sounds like an inconvenience, it’s straightforward and quick thanks to GraphComment’s intuitive usability. In this tutorial, I’ll show you… Continue Reading →