WP News Desk

Your WordPress News Dashboard

A Note on Figma access

Figma is often used build out and maintain mockups for the WordPress project. It’s free to sign up for, and you can create and edit drafts for free. For that reason, Automattic sponsors access to it for a subset of… Continue Reading →

X-post: Introducing: Test Team Reps for 2026 – 2027

X-comment from +make.wordpress.org/test: Comment on Introducing: Test Team Reps for 2026 – 2027

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

On August 23rd, 2026, Wordfence Argus, our AI research agent specializing in complex vulnerability chains, discovered a PHP Object Injection vulnerability in Tutor LMS, a WordPress e-learning plugin active on more than 100,000 websites. This vulnerability allows any authenticated attacker… Continue Reading →

WordPress 7.1.1 Maintenance and Security Release

This security and maintenance release features 17 bug fixes on Core, 19 bug fixes for the Block Editor, and 11 security fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download… Continue Reading →

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)

Last week, there were 260 vulnerabilities disclosed in 207 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 147 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report… Continue Reading →

25 Places Designers Can Still Find Free, Non-AI Images for Commercial Use

AI images are taking over stock libraries, but the human-made web isn’t dead yet. We found 25 places where designers can still find incredible free, real photography, art, and imagery for commercial use.

Exploring Divi 5’s AI Agents

Divi AI agents let you build and edit websites through conversation. Available inside Divi 5, they work alongside your page in the Visual Builder and can make changes to the layout while you watch. Paste in a screenshot of a… Continue Reading →

Chrome Can Now Measure Exactly How Obnoxious Your Website’s Ads Are

Chrome can now measure exactly how obnoxious a website’s ads are, from how much of your screen they swallow to how much data and CPU time they burn. Those ad-stuffed websites can finally be measured, and the results are public.

Call for testing: DataForm editor inspector

The “Post” (or “Page”) tab of the editor’s Settings sidebar is being rebuilt on top of DataForm, the same form that Quick Edit uses in the Site Editor. It’s available as a Gutenberg experiment and it’s ready for testing, mostly… Continue Reading →

Building WordPress for AI agents instead of just human visitors

WordPress sites have always been designed with people in mind. When someone visits a page, they look around the site, complete a form, click a button, or sign up for an account. The browser is at the heart of this… Continue Reading →

Cloudflare Just Gave AI Training Bots the Middle Finger

Cloudflare just gave website owners a new weapon against AI crawlers: keep the search traffic, block the AI training. After years of watching bots consume the web’s content, publishers finally have an easier way to tell AI companies where to… Continue Reading →

Today, WordPress Ended a 16-Year Tradition… Meet Ipsum!

After 16 years, WordPress just killed one of its most recognizable traditions. The predictable “Twenty Something” default themes are history, and their replacement, Ipsum, signals a surprisingly different vision for what WordPress thinks a modern website should start with.

How To Add Search, Filters, And Sorting To Any Divi 5 Loop

Search, filters, and sorting help visitors find specific content in a blog, product catalog, or directory. With Divi 5, you can add these controls to a custom post loop using the Post Filter Module. In this tutorial, we’ll connect a… Continue Reading →

Adobe Is Turning Photoshop Elements Into a Much Smarter Photoshop Lite

Photoshop Elements is getting a serious AI upgrade, with Generative Expand, AI upscaling and a new assistant that helps you edit simply by describing what you want.

Where Can I Watch? 1.7.0: Your List, Everywhere

Where Can I Watch? started as a way to answer one question: Where can I actually stream the title I want to watch? Over the last few releases it grew into something more: a place to keep a watchlist, track… Continue Reading →

How to Build a Private Community on WordPress with PeepSo

Most private members-only sites on WordPress feel like a login wall in front of a not-very-good forum. PeepSo flips that, giving you a real community first and the gate as a configuration choice. The post “How to Build a Private… Continue Reading →

Accessibility Team Meeting Notes: September 10, 2026

These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule.   Announcements WPAD 2026 Event is coming up! Register to attend WPAD 2026 Checkout the schedule and see what is coming… Continue Reading →

X-post: Introducing Ipsum, the new default theme

X-post from +make.wordpress.org/core: Introducing Ipsum, the new default theme

Introducing Ipsum, the new default theme

Ipsum is the proposal for the next default theme, planned to be bundled in WordPress 7.2. It is an intentionally minimal blog theme that centers on a blank canvas to make your own, with built-in room for creativity. The approach for this… Continue Reading →

Dev Chat Agenda – September 16, 2026

The next WordPress Developers Chat will take place on Wednesday, September 16, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting will focus on the discussion for upcoming releases, and have an open floor section. The various… Continue Reading →

What’s new in Gutenberg 24.0? (16 September)

“What’s new in Gutenberg…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with… Continue Reading →

10 CSS Subgrid Layouts For Divi 5 (Free Download!)

Divi 5 brings the flexibility of CSS Grid into the Visual Builder, making it possible to create structured layouts with precise control over rows, columns, gaps, and alignment. In this free pack, you’ll get 10 CSS Subgrid Layouts for Divi… Continue Reading →

Apple’s Foldable iPhone Has a Left-Handed Problem

Apple moved key controls to the side of its new foldable iPhone to make them easier to reach — but easier for whom? The decision raises a surprisingly big UX question that every web and interface designer should be thinking… Continue Reading →

Can I still benefit from AI search without letting bots destroy my server?

If you want your site to appear in AI search, allowing crawlers can seem like the obvious choice. But if automated traffic consumes too many server resources, blocking it seems just as reasonable. The problem is treating those two options… Continue Reading →

Comparing 6 WordPress Media Offload Plugins: The Ultimate Guide

Pulling your images and video from a separate server can boost your performance, but no two of the leading options charge for it the same way. In this comparison, we look at six WordPress media offload plugins to help you… Continue Reading →

Maintainer changes for WordPress/WordPress GitHub repo

Maintenance of the GitHub mirror of the WordPress build repository has recently being transferred to the WordPress.org systems team. In future, any syncing issues with the GitHub mirror should be reported to the system team, either on the make/systems blog… Continue Reading →

Attackers Actively Exploiting Critical Vulnerability in WooCommerce Wholesale Lead Capture Plugin

On February 20th, 2026, a critical Unauthenticated Arbitrary File Upload vulnerability was publicly disclosed in WooCommerce Wholesale Lead Capture, a premium WordPress plugin with an estimated 6,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary… Continue Reading →

Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin

On August 21 and August 22, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, identified two independent critical vulnerability chains in The Events Calendar, a WordPress plugin active on more than 600,000 websites. Both chains begin in the… Continue Reading →

Figma Is Turning Designers Into Plugin Makers

Figma is turning a wild idea into reality: instead of searching for the perfect plugin, you can just ask AI to build it. If this catches on, designers may stop choosing the tools in their software—and start inventing them on… Continue Reading →

« Older posts

© 2026 WP News Desk — Powered by WordPress and WP RSS Aggregator | Hosted by WP Engine

Up ↑