WordPress, without the developer-speak.
A smart, opinionated publication about what's actually happening in WordPress, written for WordPress site owners and for the developers and consultants who advise them.
This week's roundup
Read in fullIssue 3: Update now, lock it down
WordPress 7.0 looks stable. Patch one plugin fast, protect AI keys, and ask your host better questions.
Recently
All articlesUpdate Everest Forms Pro now, attackers are exploiting a critical bug
Attackers are exploiting a critical Everest Forms Pro bug that can let them take over unpatched WordPress sites.
Update Burst Statistics now, attackers are already using a site takeover flaw
Burst Statistics users should update to 3.4.2 now. Attackers are already exploiting a critical flaw that can take over a site.
Update Kirki now to stop an account takeover flaw
A Kirki plugin flaw could let attackers take over WordPress accounts, including admins. Update the plugin now.
Update WP Maps Pro now, this bug can hand over your site
A WP Maps Pro flaw lets attackers create admin accounts. If you use the plugin, update to 6.1.1 now.
Issue 3: Update now, lock it down
WordPress 7.0 looks stable. Patch one plugin fast, protect AI keys, and ask your host better questions.
Issue 2: Test 7.0, patch checkout now
WordPress 7.0 lands, AI tools mature, and two security stories call for fast action.