A screenshot gives you a visual direction, but turning it into a reusable website takes more than matching colors and spacing. You need shared values for typography and sizing, plus reusable styles that keep later pages consistent. With Divi AI… Continue Reading →
This update informs you about: Remaining documentation for wpaccessibility.org. Accessibility Team Handbook on GitHub. Preparations for publication of the docs on developer.wordpress.org Remaining documentation for wpaccessibility.org In October Rian wrote the remaining content listed in the Tracking issue Content pages:… Continue Reading →
TL;DR: WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead to remote code execution. Threat… Continue Reading →
Most WordPress news aggregators are a long scroll of headlines that send readers elsewhere, and Google treats them as thin. Here’s how cryptoheadlines.com was rebuilt with WP RSS Aggregator Pro handling the feeds and a Cloudflare Worker clustering stories, ranking… Continue Reading →
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence… Continue Reading →
On October 21, 2026, attackers were already targeting websites with requests designed to exploit two critical PHP vulnerabilities known as PHP2Shell. The official security patches weren’t available yet, but our engineering and security teams were already working to protect Kinsta-hosted… Continue Reading →
X-comment from +make.wordpress.org/security: Comment on The Core Security Initiative: two months in
Divi AI Agents can create custom SVG graphics from plain-language instructions. Describe an icon, divider, or badge, specify its style and colors, and ask the agent to add it to your layout as an editable SVG Module. In this tutorial,… Continue Reading →
Last week, there were 268 vulnerabilities disclosed in 182 WordPress Plugins and 15 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 124 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
AI did not kill web development—it just killed the easy version where knowing a few lines of code was enough. A Reddit thread asking whether web dev is still worth learning revealed the new reality: the winners will be the… Continue Reading →
X-post from +make.wordpress.org/core: Exploring a design for Feature Notifications
WordPress doesn’t have a good way to tell people what’s happening on their site. Plugins fall back on admin notices that push the page down, so the things that matter, like a failed payment, a security update or a teammate’s… Continue Reading →
You’re ready to test a WooCommerce extension update. AI helps you work through the release notes, and you have a draft test plan open. Then a colleague asks whether the update affects any custom checkout rules. You know a few… Continue Reading →
Visibility lag is the gap between a change existing in WordPress and that change reaching an end user. The edit is in the database or on disk, but visitors still get the old bytes. It compounds because a WordPress production… Continue Reading →
TL;DR: As of October 28, 2026, Wordfence is not aware of any WordPress site compromised through PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We continue to see PHP2Shell-related requests across the more than 5 million sites we protect. Those requests show ongoing scanning… Continue Reading →
This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click… Continue Reading →
A resource section can share one introduction across several pages while presenting different content beneath it. Reusing both the section and its cards lets you maintain those designs separately. With Components and Slots in Divi 5, you can combine those… Continue Reading →
X-comment from +make.wordpress.org/ai: Comment on WordPress for the Agentic Web
X-comment from +make.wordpress.org/ai: Comment on WordPress for the Agentic Web
AI makes plugin features cheap to copy. Here are the 10 ways it attacks a WordPress plugin business and the 8 moats that still hold, with a self-test for each. The post “How AI Threatens WordPress Plugin Businesses, and the… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, October 28, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting focuses on upcoming releases and Core development, with time for discussions and open floor. If you… Continue Reading →
I’m excited to introduce a new level of flexibility for Divi 5 variables: combine them, nest them within other variables, and use them directly in calculations within your settings. 🎉 Create spacing relationships that stay connected as your design changes…. Continue Reading →
Think you know Google? Think again—hidden deep within that simple search bar is a subterranean network of secret search operators, hidden diagnostic tools, and buried privacy toggles that change everything. From listening to your saved voice logs to uncovering secret… Continue Reading →
WordPress 7.2 Beta 2 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test… Continue Reading →
By the end of the afternoon, you have a working WordPress plugin. With some help from AI, it sends form submissions to your client’s CRM and emails a confirmation. You show the client. They like it. Can it go live… Continue Reading →
Handle EU VAT in WooCommerce for free, including validating VAT numbers, applying reverse charge, switching at the €10,000 threshold, and building your OSS return with VAT Right. The post “How to Handle EU VAT and OSS in WooCommerce for Free… Continue Reading →
For each WordPress release, a roadmap is pulled together to share what’s planned and provide opportunities for folks to contribute. Over the last three years, these posts have taken roughly the same shape and approach, with some variation around the… Continue Reading →
Divi 5 has a new way to build pages in the Visual Builder: Divi AI agents. Instead of working through settings panels one change at a time, you describe what you want in a conversation, and the agent carries it… Continue Reading →
When a new threat to WordPress sites emerges, the first hours matter most. Today we’re introducing the Wordfence Threat Response Team, led by Alex Thomas and made up of some of our most experienced researchers and threat analysts. It’s a… Continue Reading →
Shopify, Squarespace, Webflow, Framer, Ghost, AI site builders and Cloudflare’s EmDash: where each WordPress alternative fits in 2026, and where WordPress still wins. The post “WordPress Alternatives in 2026: Which Ones Are Really Worth It?” first appeared on WP Mayor.
