A WordPress publication · Launched May 2026
WordPress, without the developer-speak.
WPWithin covers WordPress news for site owners, not developers. A free weekly WordPress newsletter and standalone articles, written for small business owners, marketers, and the consultants who advise them.
This week's roundup
Read in full Issue 10 / Weekend Within · July 17
Issue 10: 7.1 beta lands, and Mullenweg draws a line on AI in core
WordPress 7.1 Beta 1 brings responsive styling and a media overhaul, with final release set for August 19. WooCommerce adds a free Reddit Ads extension.
Inside this issue
01
Block Editor WordPress 7.1 Beta 1 ships responsive styling, a cleaner toolbar, and a firm release date.
02
AI Mullenweg vetoes a core AI knowledge feature, wanting real adoption before it lands.
03
Security WordPress's security team details 18 months of hardening its build pipeline against supply-chain attacks.
04
Business WooCommerce ships a free Reddit Ads extension and fixes AI support assistant accuracy.
Recently
All articles July 22
Gutenberg 23.6 Makes the Playlist and Tabs Blocks Permanent
Gutenberg 23.6 makes the Playlist and Tabs blocks permanent, adds threaded inline comments, and lets the Gallery block auto-show every image on a post.
Block Editor
2 min
July 22
WordPress 7.1 Moves Image Processing Off Your Server and Into the Visitor's Browser
WordPress 7.1 processes your image uploads in the visitor's browser instead of your server, cutting failed uploads and server load. No setup needed.
Performance
3 min
July 22
Attackers Hit WordPress's Critical RCE Flaw Within 90 Minutes of the Patch
Attackers hit WordPress's critical RCE flaw within 90 minutes of the patch, and Patchstack logged over 65,000 attempts. Update to 7.0.2 now if you haven't.
Security
3 min
July 21
WordPress's AI Plugin Now Drafts Replies to Your Blog Comments
WordPress's official AI plugin 1.2.0 can draft comment replies for you to review and summarize old posts in bulk. Update if you use it.
WordPress + AI
3 min
July 21
WordPress's Worst Security Flaw in a Decade Was Found by AI in 10 Hours
A researcher used OpenAI's GPT-5.6 to find WordPress's worst unauthenticated flaw in years, for $25. If you haven't updated to 7.0.2, do it now.
Security
3 min
July 18
WordPress 7.0.2 Fixes a Critical Flaw That Let Attackers Run Code on Your Site
WordPress 7.0.2 fixes a critical flaw that let anonymous attackers run code on unpatched sites. Confirm you're updated. Attacks are already happening.
Security
3 min