Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 21 / Weekend Within · October 02
Issue 21: One Click Makes a Rogue Admin, and Few Have a Recovery Plan
A critical Elementor flaw lets one clicked link create a rogue admin. Update to 4.3.2. Only 27.9% of WordPress pros have a hack recovery plan.
Inside this issue
01
Security Elementor needs a patch now, and most WordPress pros have no hack recovery plan.
02
Block Editor Gutenberg 24.1 spreads the same design tools across nearly every block.
03
WordPress Playground previews plugin emails, and the 7.2 release moves to a livestream.
Latest WordPress articles
Browse all WordPress articles October 06
Attackers Are Exploiting Ninja Forms and WPC Product Bundles to Plant Hidden Admins
Attackers are exploiting Ninja Forms and WPC Product Bundles flaws to plant hidden admin accounts. Update, then check for rogue users.
Security
3 min
October 06
WordPress 7.1.3 Fixes 7 Security Flaws, Including Exposed Private Comments
WordPress 7.1.3 fixes 7 security flaws, including stored XSS in comment moderation and exposed private comments. Update your site now.
Security
2 min
October 06
WordPress's AI Plugin 1.4.0 Adds Markdown Feeds and a Comment Value Score
AI plugin 1.4.0 adds opt-in Markdown feeds for AI tools and a Comment Value score for moderation. Update if you use the plugin.
WordPress + AI
2 min
October 05
WordPress.org Won't Delist Themes Over the Accessibility-Ready Tag After All
WordPress.org will not delist themes over the accessibility-ready tag. It will become an opt-in listing that can be removed if a theme falls short.
Accessibility
2 min
October 02
Issue 21: One Click Makes a Rogue Admin, and Few Have a Recovery Plan
A critical Elementor flaw lets one clicked link create a rogue admin. Update to 4.3.2. Only 27.9% of WordPress pros have a hack recovery plan.
Weekend Within roundup
4 min
September 30
Gutenberg 24.1 Brings Matching Design Tools to Nearly Every Block
Gutenberg 24.1 adds background, color, and typography controls to almost every core block, plus a new text shadow panel in Global Styles.
Block Editor
3 min