On February 20th, 2026, a critical Unauthenticated Arbitrary File Upload vulnerability was publicly disclosed in WooCommerce Wholesale Lead Capture, a premium WordPress plugin with an estimated 6,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary… Continue Reading →
On August 21 and August 22, 2026, Wordfence Argus, created by the Wordfence Threat Intelligence team, identified two independent critical vulnerability chains in The Events Calendar, a WordPress plugin active on more than 600,000 websites. Both chains begin in the… Continue Reading →
In May 2026, the Wordfence Bug Bounty Program received 1095 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence… Continue Reading →
It’s official; the beta phases have ended, and Divi 5 has arrived. This isn’t the end; it’s a new beginning for Divi, and we are moving forward faster than ever with weekly updates. If you use Divi 5, you’ll see… Continue Reading →
Every typography decision on a website is about relationships: how one text element reads against another, how clearly the hierarchy comes through, and how body text stays readable without competing with the elements around it. Static fonts give you a… Continue Reading →
We’re back with another Divi 5 sneak peek, and this one introduces two upcoming features that will fundamentally improve the way you build reusable designs in Divi: Components and Slots. Components are a complete reimagining of Divi’s existing Global Modules…. Continue Reading →
Perfectly even Grids are useful, but they are not always memorable. Stretch one card, deepen another, or build a diagonal that climbs across the page, and the layout begins to guide the eye with purpose. A few deliberate placement choices… Continue Reading →
Start of the meeting in Slack, facilitated by @amykamala See the agenda post. Announcements 7.1 Everyone is encouraged to give feedback on the 7.1 release cycle. Check out the WordPress 7.1 Release Retrospective. 7.1.1 WordPress 7.1.1 RC1 is planned on September 10…. Continue Reading →
Last week, there were 277 vulnerabilities disclosed in 187 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 153 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
WordPress 7.1.1 Release Candidate 1 (RC1) is available for testing! Some ways you can help test this minor release: Use the WordPress Beta Tester plugin As this is a minor RC release, select the Point Release channel and the Nightlies… Continue Reading →
Real estate websites live or die by their search experience. Visitors expect to enter an address or city, choose a property type, select the number of bedrooms and bathrooms, pick an amenity, and see matching listings without leaving the page… Continue Reading →
Automation is taking over more of the WordPress operations that once required someone at a keyboard. Deployments, updates, security responses, and infrastructure changes can all now run without a person watching each step. However, the part that’s not yet solved… Continue Reading →
The Accessibility Lab plugin was announced on August 21st, and now that WordPress 7.1 is wrapped up, it’s time to start scoping out the first features to target for release. For an initial discussion, we’ll meet on Thursday, September 17,… Continue Reading →
As of September 8th, the versions of Node.js and npm required for WordPress development are now 24.x (minimum 24.18.0) and 11.x (minimum 11.16.0). This applies to trunk in both repositories, the wp/7.1 branch in gutenberg, and the 7.1 branch in… Continue Reading →
Gravity Forms is one of the most popular tools for building contact forms, multi-page applications, and lead forms in WordPress. Previously, adding one to a Divi page relied on a shortcode, while matching its fields, buttons, and validation states to… Continue Reading →
It’s time to get WordPress 7.2 ready for release, and help is needed to ensure it’s smooth and bug-free. Whether you’re an experienced contributor or joining in for the first time, everyone is welcome! Schedule Overview Regular bug scrubs are… Continue Reading →
This post is announcing the formation of the 7.2 release squad after a call for volunteers. Exciting News: The WordPress 7.2 Release Squad is assembled! Release Lead: Matt Mullenweg Release Coordination: David Baumwald Tech Leads: George Mamadashvili, Peter Wilson Default… Continue Reading →
We’re launching an automated security review for every plugin release. Before a release is distributed through the WordPress.org update API, it is analyzed for security issues and releases that are considered to pose a potential security risk (either intentional or… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, September 10, 2026 15:00 UTC Announcements WPAD 2026 Event is coming up! Register to attend WPAD 2026 Checkout the schedule and see what is coming up! WordPress 7.1 Release Retrospective… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, September 9, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting will focus on the discussion for upcoming releases, and have an open floor section. The various… Continue Reading →
WordPress core runs about 31,000 PHPUnit tests on every commit. These tests need maintenance just like core code: many leak state into other tests, some assert nothing, and several are coupled to network calls. A goal for the Build/Test Tools… Continue Reading →
The full chat log is available beginning here on Slack. WordPress Performance Trac tickets @spacedmonkey shared ongoing work to improve query caches and requested more eyes on the work. The idea came from a chat with @peterwilsoncc on the RTC… Continue Reading →
Divi 5 gives you flexible layout tools for arranging imagery into structured, visually engaging compositions. Its CSS Grid Editor also makes it easier to visualize and adjust grid structures directly inside the Visual Builder. In this free pack, you’ll get… Continue Reading →
Bots now generate more web traffic than humans, but what’s more interesting is the type of bot driving these interactions. In addition, studying what those bots do when landing on your site is a worthwhile pursuit. The typical AI traffic… Continue Reading →
The Themes Team holds meetings on the second and fourth Tuesdays every month. For this month, this is the first meeting and is set to take place on 8 September. Meeting Details: Date and Time: Tuesday, September 8 2026, 15:00 UTC… Continue Reading →
In July, students at two campuses in Kishoreganj, Bangladesh, built 108 websites. In eastern Uganda, a workshop that arrived to find no electricity at the school ran anyway, for more than 100 learners, because a former student had asked for… Continue Reading →
A huge congratulations, and a giant thank you to everyone who helped make WordPress 7.1 happen! The release was only made possible by your dedication and hard work. You all are heroes. Now that the development cycle is over, it’s… Continue Reading →
Divi 5 continues to expand its native module library. One of its newest additions is the Charts Module, released alongside the Gravity Forms, Imagely, and Payment Button modules. It turns raw data into interactive charts without relying on a third-party… Continue Reading →
Marketing pages from Stripe, Linear, and Notion often use asymmetry to create movement, establish hierarchy, and give important content more visual weight. The layout may feel spontaneous, but the underlying structure is usually precise. With Divi 5, that structure can… Continue Reading →
The meeting notes are from the themes team discussion. Date: August 25, 2025 Time: 15:00 UTC Location: #themes channel Agenda: Themes team meeting agenda Agenda Prepared by: @bijayyadav Meeting facilitator – @bijayyadav Full transcript – #themes channel Attendees: Thank you to everyone who attended the meeting. @bijayyadav… Continue Reading →
