Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 12 / Weekend Within · July 31
Issue 12: WordPress's New Safety Net Just Passed Its First Real Test
A plugin backdoor never reached a single WordPress site, but WP2Shell attacks have topped 11 million attempts. WordPress 7.1 nears its August 19 release.
Inside this issue
01
Security A plugin backdoor never shipped, and WP2Shell attacks pass 11 million attempts.
02
Block Editor WordPress 7.1 adds gradient backgrounds and pauses a feature ahead of its August 19 release.
03
Commerce WooCommerce POS now runs on iPhone with Tap to Pay for UK stores.
04
Community WordPress Credits' first student survey shows high satisfaction but a retention gap after graduation.
Latest WordPress articles
Browse all WordPress articles August 04
Critical Flaw in WooCommerce Social Login Lets Anyone Log In as Your Admin
A critical flaw in WooCommerce Social Login lets attackers log in as any user, including admins, by faking an Apple sign-in token. Update to 2.8.8 now.
Security
3 min
August 03
WordPress 7.1 Adds Tooltips to Explain Icon-Only Buttons in Your Admin Screens
WordPress 7.1 adds hover tooltips and an info button to icon-only admin controls, plus an explainer for the login screen's Remember Me checkbox.
Accessibility
2 min
July 31
Issue 12: WordPress's New Safety Net Just Passed Its First Real Test
A plugin backdoor never reached a single WordPress site, but WP2Shell attacks have topped 11 million attempts. WordPress 7.1 nears its August 19 release.
Weekend Within roundup
4 min
July 29
Wordfence: WordPress's WP2Shell Attack Has Now Topped 11 Million Attempts
Wordfence has blocked over 11 million attempts to exploit WordPress's WP2Shell flaw. If your site reads 7.0.2, 6.9.5, or 6.8.6, you're already protected.
Security
3 min
July 28
Wordfence's AI Caught a Backdoored Plugin With 20,000 Installs in Under Two Hours
Wordfence's AI tool caught a backdoored plugin with 20,000 installs within two hours. If you use Advanced Responsive Video Embedder, uninstall it now.
Security
3 min
July 26
WordPress 7.1 Lets You Layer a Gradient Over a Background Image
WordPress 7.1 finally lets you combine a color gradient with a background image on Group, Quote, and Pullquote blocks, no custom CSS needed.
Block Editor
3 min