WordPress and Astro can both power a blog, portfolio, or business website, but they give you different starting points. WordPress includes a content management system with an editing dashboard, user accounts, and a media library. Astro is a web framework… Continue Reading →
Most grid layouts fill every available cell. Leaving some cells empty can create a more interesting composition, with space that guides the eye through the content. With CSS Grid in Divi 5, Grid Offset Rules let you position items precisely… Continue Reading →
Last week, there were 497 vulnerabilities disclosed in 327 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 218 Vulnerability Researchers that contributed to WordPress Security last week. Review those… Continue Reading →
TL;DR: WordPress Contributor Toolkit v2.0.0 has been released with a new interface built on the WordPress Design System, a settings dialog, a dark theme, and translations into ten languages. The WordPress Contributor Toolkit removes the points of friction first-time contributors… Continue Reading →
Building faster in the Divi 5 Visual Builder means spending less time opening panels and repeating the same setup. The Command Center handles actions you can name, such as adding modules, applying presets, and opening settings. Workspaces save the panel… Continue Reading →
On October 21, 2026, two critical PHP vulnerabilities, collectively known as PHP2Shell, were publicly disclosed. These vulnerabilities could allow attackers to execute malicious code on affected servers without authentication. The PHP development team released emergency security updates the same day… Continue Reading →
This week was more of a maintenance week: 24 PRs merged, 23 of them Dependabot updates, The more interesting activity is in review: 16 new contributor PRs opened this week. Highlights README now points to the demo plugin (#648, @psykro):… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th… Continue Reading →
On October 21, 2026, the PHP project disclosed two critical vulnerabilities that can allow unauthenticated remote code execution on affected web servers. Both vulnerabilities received a CVSS v4.0 score of 9.2. CVE-2026-109618 CVE-2026-109619 Pagely deployed initial mitigations while preparing updated… Continue Reading →
On October 21st, 2026, the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. We warned site owners before the fixes became available and followed up after our team reviewed the vulnerability details and began… Continue Reading →
I’m excited to introduce the Icon Manager for Divi 5, a central place to import your own icons, organize them into collections, and choose which collections appear while you build. 🎉 Bring in custom SVGs or an icon font, create… Continue Reading →
With the introduction of the Abilities API and the AI Client, WordPress has evolved into a true execution engine, bridging your applications with the AI models of your choice. This monumental shift changes what the CMS is at its core…. Continue Reading →
On October 21, 2026, the PHP project released emergency updates for two critical vulnerabilities that can allow an unauthenticated attacker to run code through the PHP service handling website traffic. We first alerted WordPress site owners to these updates in… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, October 22, 2026 at 08:30 PM GMT+5:30 Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th Roadmap to 7.2 Help Test WordPress… Continue Reading →
The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can allow unauthenticated remote code execution. The PHP project says all PHP users are strongly encouraged to update immediately. We… Continue Reading →
Divi AI agents can build, edit, and restyle your pages from plain-language instructions. Quick edits can cost very little, while full layout generations and advanced multi-step tasks vary in cost depending on the models used and the work involved. We… Continue Reading →
The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP. Due to the critical severity of the issues, site owners are encouraged to immediately update their installations of PHP. Your web host may… Continue Reading →
The next WordPress Developers Chat will take place on Wednesday, October 21, 2026, at 15:00 UTC in the core channel on Make WordPress Slack. The live meeting focuses on upcoming releases and Core development, with time for discussions and open floor. If you… Continue Reading →
The PHP security team has issued advance notice of an upcoming critical security release, scheduled for Wednesday, October 21, 2026 at 14:00 UTC (10:00 AM Eastern). The release fixes two critical vulnerabilities, both rated 9.2 on the CVSS v4.0 scale…. Continue Reading →
On August 30, 2026, during internal research, the Wordfence Threat Intelligence Team discovered an Unauthenticated PHP Object Injection vulnerability in Duplicator and Duplicator Pro. Duplicator has more than one million active installations. The vulnerability is tracked as CVE-2026-82814 and carries… Continue Reading →
The full chat log is available beginning here on Slack. WordPress Performance Trac tickets @westonruter shared that, as of r64585, eliminating script/style concatenation has landed in WordPress and is included in the 7.2-beta1 release. This retires the use of load-scripts.php… Continue Reading →
This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features. How to… Continue Reading →
Divi AI Agents can help you understand your website as well as build it. With the Ask feature in Divi 5, you can ask about settings and layout approaches and get guidance based on the page you’re working on, all… Continue Reading →
AI is changing how WordPress developers work. It can generate code, help troubleshoot errors, explain unfamiliar APIs, and turn a plain-language request into a prototype. But producing code and deciding whether it belongs on a production website are different tasks…. Continue Reading →
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was accessed and says that database contained connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, along with customer account… Continue Reading →
This post summarizes the feedback received from the WordPress 7.1 retrospective. Thank you to those who contributed their feedback via the retrospective survey and comments on the post! For ease of reading, feedback has been synthesized. Full feedback is available for… Continue Reading →
Almost any AI website builder can turn a short business description into a homepage. The real test comes later, when you need to restructure a section, update your branding, or add another page that feels like it belongs on the… Continue Reading →
An image mosaic combines photographs of different sizes in one connected grid. Larger tiles highlight selected images, while smaller tiles fill the spaces around them. With Divi 5’s CSS Grid Editor, you can build this arrangement visually, resizing and positioning… Continue Reading →
Sometimes a reusable section needs more than a different heading or button label. One page might need a workshop schedule, while another needs a booking form. You still want the surrounding design to look consistent and update from one place…. Continue Reading →
Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. According to Rank Math, the affected version was downloaded or installed through an update between October 15, 2026 at 20:02 UTC and October 16,… Continue Reading →
