Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 25 / Weekend Within · October 30
Issue 25: Another Core Security Release, and a Plan to Make WordPress Agent-Ready
WordPress 7.1.4 is the seventh core security release since July. PHP attacks are climbing, and WordPress wants AI agents connecting by 7.3.
Inside this issue
01
Security WordPress 7.1.4 patches an upgrade-process flaw, and PHP attacks keep climbing.
02
AI The WordPress AI team wants any AI agent to connect with a simple sign-in.
Latest WordPress articles
Browse all WordPress articles October 30
A Server Library Flaw Can Crash WordPress Through One Anonymous Request
A server library flaw lets one anonymous request crash your PHP workers. WordPress has no update for it, so ask your host to patch Brotli.
Security
3 min
October 30
Issue 25: Another Core Security Release, and a Plan to Make WordPress Agent-Ready
WordPress 7.1.4 is the seventh core security release since July. PHP attacks are climbing, and WordPress wants AI agents connecting by 7.3.
Weekend Within roundup
3 min
October 30
Attackers Are Probing the WordPress 7.1.4 Upgrade Flaw. Check That You Updated
Attackers are probing the WordPress 7.1.4 upgrade flaw, and Wordfence says 22 flaws were fixed. Confirm your site updated to 7.1.4.
Security
2 min
October 28
WordPress 7.1.4 Fixes 13 Security Issues, Including a Flaw in the Upgrade Process
WordPress 7.1.4 fixes 13 security issues, including a flaw in the upgrade process that can allow code execution. Update your site now.
Security
2 min
October 23
Attacks on the New PHP Flaws Are Climbing. Update PHP and Restart It
Wordfence has blocked 74,000+ attempts to exploit the new PHP flaws, with no confirmed hacks yet. Update PHP and restart it.
Security
2 min
October 23
Issue 24: Two Plugin Vendors Breached, and PHP Needs Patching
Rank Math and UpdraftPlus were breached, and PHP needs a server update. WordPress 7.2 Beta 1 is out, and MCP may be heading for core.
Weekend Within roundup
4 min