Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 14 / Weekend Within · August 14
Issue 14: When a PNG Isn't a PNG
WordPress 7.0.4 patches an Imagick RCE flaw, its third security release in weeks. Two plugin backdoors hit official update channels this week too.
Inside this issue
01
Security A third security release in a month, plus two plugin backdoors through official update channels.
02
Accessibility Mullenweg calls a theme accessibility overhaul 'permanently delayed,' leaving a September deadline unresolved.
03
Business A new browser extension, what plugin reviews reveal, and a WP Engine update.
Latest WordPress articles
Browse all WordPress articles August 14
Issue 14: When a PNG Isn't a PNG
WordPress 7.0.4 patches an Imagick RCE flaw, its third security release in weeks. Two plugin backdoors hit official update channels this week too.
Weekend Within roundup
6 min
August 14
Study of 3,400 WordPress Plugin Reviews Finds Reliability, Not Missing Features, Drives 1-Star Ratings
A study of 3,400 WordPress.org plugin reviews found reliability failures drive 42% of 1-star ratings. Missing features caused just 2.5%.
Plugins
4 min
August 13
WordPress.org Launches an Official Browser Extension for Chrome and Safari
WordPress.org released an official browser extension for Chrome and Safari that hides your admin bar, adds shortcuts, and previews pages on mobile.
WordPress Updates
3 min
August 12
WordPress 7.0.4 Fixes a Flaw That Let a Disguised Image Run Code on Your Server
WordPress 7.0.4 fixes a flaw where a disguised image upload lets an Author-level account run code on your server. Update now.
Security
3 min
August 11
Matt Mullenweg Calls WordPress's Theme Accessibility Overhaul 'Permanently Delayed'
Matt Mullenweg says a WordPress theme accessibility overhaul is permanently delayed, leaving theme authors unclear on a September delisting deadline
Accessibility
3 min
August 09
Supply Chain Attack Hits Seven BdThemes Elementor Plugins With Hidden Backdoors
Attackers hijacked a promotional banner feed in seven BdThemes Elementor plugins to plant rogue admin accounts and hidden backdoors. Check your site now.
Security
4 min