Page 3 of 8
On October 21, 2026, two critical PHP vulnerabilities, collectively known as PHP2Shell, were publicly disclosed. These vulnerabilities could allow attackers to execute malicious code on affected servers without authentication. The PHP development team released emergency security updates the same day… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th… Continue Reading →
On October 21, 2026, the PHP project disclosed two critical vulnerabilities that can allow unauthenticated remote code execution on affected web servers. Both vulnerabilities received a CVSS v4.0 score of 9.2. CVE-2026-109618 CVE-2026-109619 Pagely deployed initial mitigations while preparing updated… Continue Reading →
Reddit’s biggest controversies are platform-design lessons in disguise. From GameStop and API protests to misinformation, moderator revolts, and online witch hunts, each one shows what happens when community systems fail under pressure.
With the introduction of the Abilities API and the AI Client, WordPress has evolved into a true execution engine, bridging your applications with the AI models of your choice. This monumental shift changes what the CMS is at its core…. Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, October 22, 2026 at 08:30 PM GMT+5:30 Announcements WordPress 7.2 Beta 1 was released on October 20th, 2026 Beta 2 scheduled for October 27th Roadmap to 7.2 Help Test WordPress… Continue Reading →
The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP. Due to the critical severity of the issues, site owners are encouraged to immediately update their installations of PHP. Your web host may… Continue Reading →
Forget the same safe fonts you see on every other website. These five independent foundries are making typography weird, expressive and impossible to ignore—and they might convince you to never reach for Inter again.
This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features. How to… Continue Reading →
AI is changing how WordPress developers work. It can generate code, help troubleshoot errors, explain unfamiliar APIs, and turn a plain-language request into a prototype. But producing code and deciding whether it belongs on a production website are different tasks…. Continue Reading →
My menu bar fills up the same way a junk drawer does (as does most of you running macOS can likely attest). Every utility, sync client, and helper app adds an icon, and most of them are things I need… Continue Reading →
WordPress maintenance is the suite of operational tasks that prevent downtime and configuration drift on production systems. That definition holds whether you run one brochure site or 400 revenue-bearing properties. What changes with scale is who carries the risk when… Continue Reading →
The Macintosh didn’t always smile. Susan Kare gave it one — and with a handful of black pixels, helped transform the computer from an intimidating machine into something that felt human. More than 40 years later, we’re still speaking the… Continue Reading →
Publishing GenAI content is straightforward until the workflow diverges from its path. For example, a client can flag stale content a few weeks after publishing and want it fixed immediately. This requires the right checks and hosting infrastructure. Without them,… Continue Reading →
70.4% of shoppers have abandoned a purchase over a slow or glitchy website AI does a lot of the shopping legwork now. People ask a chatbot for the best running shoes or a decent espresso grinder, get a shortlist, and… Continue Reading →
These is the bi-weekly notes for the Accessibility Team meeting that happens on alternate Thursday in #accessibility. You can read the full transcript here or see the full meeting schedule. The biweekly Accessibility Team meeting was kept brief, with updates shared asynchronously, as WordPress Accessibility Day 2026… Continue Reading →
Your WordPress site is slow. You know it, your visitors know it, and Google definitely knows it. The instinct is to blame the theme, or that plugin you installed last month. Check the platform underneath first. Most people treat hosting… Continue Reading →
A polished portfolio used to get you hired. Now AI makes polished work cheap, and clients want proof you can solve problems, communicate clearly, and deliver today.
A customer sees one checkout page. Behind it, your WordPress site may contact several services to process payment, check inventory, calculate shipping, and update your CRM. Plugins make those connections easy to set up. They don’t always make it obvious… Continue Reading →
In the last update, your watchlist stopped living on one device. Turn on iCloud sync and it follows you from your phone to your iPad. But it was still your list. After making sure that watchlists are actually available in… Continue Reading →
A web design degree used to be the obvious way to learn the craft. Now it’s competing with YouTube, AI, and people who spend those same years actually building things — so if universities can’t offer something better, students have… Continue Reading →
Bot traffic is becoming a bigger part of the web, and a bigger consideration for anyone managing a website. That was reinforced by Kinsta’s analysis of more than 10 billion requests in a year when AI-driven bot traffic was reported… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, October 08, 2026 at 08:30 PM GMT+5:30 WP Accessibility Day 2026 takes place online on October 7–8, 2026 (today), featuring 24 hours of free talks on digital accessibility and WordPress…. Continue Reading →
Holiday traffic is the best kind of problem, until it isn’t. When your campaign lands, your product gets featured, or that email goes out, the visitors you’ve worked so hard to attract can overwhelm an unprepared site. Slow pages, checkout… Continue Reading →
Dark mode toggles are everywhere, but do users actually need them, or are designers designing for other designers? A growing UX debate is questioning whether that little sun-and-moon button deserves permanent space in your website’s header.
This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPress.org, or visit your WordPress Dashboard,… Continue Reading →
Deleting your entire production database and backups is not something a human will do often, but it is possible for an AI agent running under strict instructions. A credential mismatch within the codebase is not something an agent will check…. Continue Reading →
Welcome to DEV, your monthly WordPress deep dive. The client just asked you to “make it pop more” for the 5th time. Take a deep breath and read this instead. Stick around to the end for a very catchy delivery…. Continue Reading →
X-comment from +make.wordpress.org/accessibility: Comment on Accessibility-ready directory changes coming!
Work is largely completed for making the accessibility-ready tag conditional in the theme directory, as proposed in meta trac ticket #8427. There’s a little bit more work to be done to set up the changes, which is going to briefly… Continue Reading →
