On August 9th, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, discovered an Arbitrary File Upload vulnerability in Gravity Forms, a WordPress plugin estimated to have more than one million active installations. This high-severity vulnerability makes it possible… Continue Reading →
Divi 5 makes it easy to introduce the people behind your brand with team sections that feel intentional, polished, and visually distinctive. In this free pack, you’ll get 9 Creative Team Sections for Divi 5 that are perfect for agencies,… Continue Reading →
On August 14th, 2026, we received a submission for an Unauthenticated Second-Order SQL Injection vulnerability in All-in-One WP Migration and Backup, a WordPress plugin with more than 5 million active installations. This vulnerability makes it possible for unauthenticated attackers to… Continue Reading →
When someone wants to know whether a brand is trustworthy, searching the brand name up isn’t the first option anymore. They ask an LLM to compare it against alternatives, check Reddit, look at some review aggregators, or even see whether… Continue Reading →
X-comment from +make.wordpress.org/security: Comment on Updates to the WordPress Vulnerability Disclosure Program
Ever noticed that signing in takes one tap, but logging feels like solving a puzzle?That’s not bad design. It’s a business strategy. The modern internet has quietly turned “leave” into the hardest button to find—and most people never realized it… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. Announcements Help shape the Accessibility Lab plugin WordPress 7.1 “Mary Lou” was released on August 19th as scheduled!… Continue Reading →
A dynamic blog grid needs two things to work well together: content that can change and a layout that can keep up with it. New posts get published, categories grow, and the number of items returned by a query changes… Continue Reading →
What if your WordPress site could help visitors find the content they need, and help you figure out what to write about next? The secret to a successful WordPress blog is creating content that’s highly useful and relevant to your… Continue Reading →
A WordPress AI plugin that writes a paragraph on request is common enough by now. My Aimogen Pro review looks at what happens if a plugin can also read a site, decide what needs doing, and act on it through… Continue Reading →
With: new and updated documentation, an explanation of the accessibility-ready program, a complete sitemap for users, our plans for September. New and updated documentation Standards and best practice section: New topic: Disappearing toast notifications in Design patterns to avoid. Proud… Continue Reading →
Divi 5‘s Loop Builder lets you turn Divi elements into dynamic feeds for posts, products, projects, custom post types, and other queried content. You design one repeated item, connect it to Dynamic Content, and let Divi populate the layout from… Continue Reading →
Divi 5 includes a native icon system that makes icons easy to add and style throughout the Visual Builder. For projects that need a much larger selection, Divi Sensei Icons by Divi Sensei expands that same workflow with thousands of… Continue Reading →
You’re updating a service page, swapping out a few paragraphs, and you hit Save. Ten minutes later, someone spots that the original copy had an approved legal disclaimer. Suddenly, you need that earlier version back. This is exactly the kind… Continue Reading →
X-comment from +make.wordpress.org/security: Comment on The Core Security Initiative
A blog grid can look perfectly aligned while you’re designing it with placeholder content, then fall apart as soon as real posts start loading in. One author uploads a wide screenshot, another uses a portrait photo, and somebody else adds… Continue Reading →
When you create an AI agent that makes a breakthrough that is so difficult to understand that you need to ask it to write a blog post to explain it to you, you know you’re on to something. If you’re… Continue Reading →
On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub… Continue Reading →
We’re proud to announce that WordPress has signed Open Weights and American AI Leadership, an open letter asking US policymakers to not place early restrictions on open weight AI models. These are artificial intelligence models that anyone can download, inspect,… Continue Reading →
Last week, there were 240 vulnerabilities disclosed in 184 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 105 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
Most credibility advice focuses primarily on your content. This values real experiences, credentialed authors, original research, and relying on humans across anything AI-assisted. All of that is correct and should already be on your checklist. What it misses is that… Continue Reading →
You build the homepage first. Then an about page, then a contact page. By the third one, you have the rhythm of it: drop in a section, add your content, style it, publish. One page, one design. Then you get… Continue Reading →
Divi 5 already gives you a complete CSS Grid system for building two-dimensional layouts inside the Visual Builder. You can define columns and rows, control gaps and track sizes, use premade grid structures, and create Grid Offset Rules for layouts… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, August 27, 2026 15:00 UTC Announcements Help shape the Accessibility Lab plugin WordPress 7.1 “Mary Lou” was released on August 19th as scheduled! A call for volunteers was published for WP 7.2…. Continue Reading →
WordPress has no first-class way to store a credential. This proposal outlines a Secrets API for 7.2, along with WP-CLI support for it, and explains why the accompanying UI should wait for 7.3. Why it matters Every plugin that needs… Continue Reading →
A year ago we wrote that we’d put AI to work across the whole company, turning everyone on the team into a capable AI operator so our defenders could stay ahead of the threat actors attacking the sites we protect…. Continue Reading →
The full chat log is available beginning here on Slack. WordPress Performance Trac tickets @mukesh27 shared a performance regression found in WordPress 7.1 and reported as #65929 and asked anyone with time to take a look and said any review… Continue Reading →
Divi 5 makes it easy to create structured layouts where imagery, text, stats, and supporting content work together as one composition. In this free pack, you’ll get 7 Square Grids for Divi 5 that are perfect for hero sections, agency… Continue Reading →
On August 11th, 2026, we received a submission for an Unauthenticated Account Takeover vulnerability in TranslatePress, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for unauthenticated attackers to obtain an administrator’s password reset link,… Continue Reading →
Let’s set the scene. Your new WooCommerce chatbot passes every test. It answers product questions, helps shoppers compare options, and responds quickly enough that nobody gives performance a second thought. The problem doesn’t surface until the store has a busy… Continue Reading →
