On February 20th, 2026, a critical Unauthenticated Arbitrary File Upload vulnerability was publicly disclosed in WooCommerce Wholesale Lead Capture, a premium WordPress plugin with an estimated 6,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary… Continue Reading →
On August 21 and August 22, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, identified two independent critical vulnerability chains in The Events Calendar, a WordPress plugin active on more than 600,000 websites. Both chains begin in the… Continue Reading →
Figma is turning a wild idea into reality: instead of searching for the perfect plugin, you can just ask AI to build it. If this catches on, designers may stop choosing the tools in their software—and start inventing them on… Continue Reading →
In May 2026, the Wordfence Bug Bounty Program received 1095 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence… Continue Reading →
It’s official; the beta phases have ended, and Divi 5 has arrived. This isn’t the end; it’s a new beginning for Divi, and we are moving forward faster than ever with weekly updates. If you use Divi 5, you’ll see… Continue Reading →
Ask an AI coding agent to fix a WordPress site, and you’ll likely get a solution to copy, paste, and test it yourself. As such, every fix is really just an educated guess dressed up as code. This Novamira review… Continue Reading →
Every typography decision on a website is about relationships: how one text element reads against another, how clearly the hierarchy comes through, and how body text stays readable without competing with the elements around it. Static fonts give you a… Continue Reading →
We’re back with another Divi 5 sneak peek, and this one introduces two upcoming features that will fundamentally improve the way you build reusable designs in Divi: Components and Slots. Components are a complete reimagining of Divi’s existing Global Modules…. Continue Reading →
Perfectly even Grids are useful, but they are not always memorable. Stretch one card, deepen another, or build a diagonal that climbs across the page, and the layout begins to guide the eye with purpose. A few deliberate placement choices… Continue Reading →
After 53 years working with type, Pat Lightizer got the ultimate retirement gift: her own font.
Start of the meeting in Slack, facilitated by @amykamala See the agenda post. Announcements 7.1 Everyone is encouraged to give feedback on the 7.1 release cycle. Check out the WordPress 7.1 Release Retrospective. 7.1.1 WordPress 7.1.1 RC1 is planned on September 10…. Continue Reading →
Last week, there were 277 vulnerabilities disclosed in 187 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 153 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
WordPress 7.1.1 Release Candidate 1 (RC1) is available for testing! Some ways you can help test this minor release: Use the WordPress Beta Tester plugin As this is a minor RC release, select the Point Release channel and the Nightlies… Continue Reading →
TikTok isn’t just hosting videos anymore—it’s quietly letting web-based experiences live inside the app. TikTok Minis could blur the line between social network, browser, and app platform, and web designers should be paying attention.
Google is quietly testing a way to bring Search outside Chrome and directly on top of whatever app you’re using. It’s called Project Loom, and this little floating search box could hint at a much bigger future where Google follows… Continue Reading →
Real estate websites live or die by their search experience. Visitors expect to enter an address or city, choose a property type, select the number of bedrooms and bathrooms, pick an amenity, and see matching listings without leaving the page… Continue Reading →
Automation is taking over more of the WordPress operations that once required someone at a keyboard. Deployments, updates, security responses, and infrastructure changes can all now run without a person watching each step. However, the part that’s not yet solved… Continue Reading →
Moving approved content from staging to production usually means a database dump that takes everything with it, including the orders and signups that came in that morning. Import Export by RockStarLab goes the other way round, syncing only the parts… Continue Reading →
The Accessibility Lab plugin was announced on August 21st, and now that WordPress 7.1 is wrapped up, it’s time to start scoping out the first features to target for release. For an initial discussion, we’ll meet on Thursday, September 17,… Continue Reading →
Firefox is getting its biggest makeover in years—but Mozilla has already backed away from some of its boldest ideas. Project Nova reveals what happens when modern design trends, millions of opinionated users, and the internet’s unstoppable obsession with rounded corners… Continue Reading →
As of September 8th, the versions of Node.js and npm required for WordPress development are now 24.x (minimum 24.18.0) and 11.x (minimum 11.16.0). This applies to trunk in both repositories, the wp/7.1 branch in gutenberg, and the 7.1 branch in… Continue Reading →
Gravity Forms is one of the most popular tools for building contact forms, multi-page applications, and lead forms in WordPress. Previously, adding one to a Divi page relied on a shortcode, while matching its fields, buttons, and validation states to… Continue Reading →
It’s time to get WordPress 7.2 ready for release, and help is needed to ensure it’s smooth and bug-free. Whether you’re an experienced contributor or joining in for the first time, everyone is welcome! Schedule Overview Regular bug scrubs are… Continue Reading →
This post is announcing the formation of the 7.2 release squad after a call for volunteers. Exciting News: The WordPress 7.2 Release Squad is assembled! Release Lead: Matt Mullenweg Release Coordination: David Baumwald Tech Leads: George Mamadashvili, Peter Wilson Default… Continue Reading →
Your website’s next visitor might not be human. Meta’s new Muse agent can navigate sites, fill out forms and take action for you—and it could force web designers to rethink exactly who they’re designing for.
Most WordPress MCP servers compete on how many tools they expose. Royal MCP Pro is competing on what happens after those tools run, and it has just opened a capped Founding Member pricing window with rates locked for life. The… Continue Reading →
We’re launching an automated security review for every plugin release. Before a release is distributed through the WordPress.org update API, it is analyzed for security issues and releases that are considered to pose a potential security risk (either intentional or… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, September 10, 2026 15:00 UTC Announcements WPAD 2026 Event is coming up! Register to attend WPAD 2026 Checkout the schedule and see what is coming up! WordPress 7.1 Release Retrospective… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, September 9, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting will focus on the discussion for upcoming releases, and have an open floor section. The various… Continue Reading →
Switching your WordPress site to a new host or domain doesn’t have to mean losing traffic or stressing out. Think of it like relocating to a new home, you want everything to arrive intact, from your furniture to your favorite… Continue Reading →
