Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 11 / Weekend Within · July 24
Issue 11: AI found WordPress's worst RCE in years, attackers followed in 90 minutes
Attackers hit WordPress's critical RCE within 90 minutes of the patch. An AI found the flaw in 10 hours. WordPress 7.1 drops a feature over security fears.
Inside this issue
01
Security An AI found WordPress's worst RCE in years; attackers struck within 90 minutes.
02
WordPress 7.1 Beta 3 drops a feature, adds infinite scrolling, and moves image processing to the browser.
03
Block Editor Gutenberg 23.6 makes the Playlist and Tabs blocks a permanent part of WordPress.
04
AI WordPress's AI plugin can now draft comment replies and summarize old posts in bulk.
05
Community A nonprofit rebrands over a trademark filing, and WordCamp US publishes its Phoenix schedule.
Latest WordPress articles
Browse all WordPress articles July 28
Wordfence's AI Caught a Backdoored Plugin With 20,000 Installs in Under Two Hours
Wordfence's AI tool caught a backdoored plugin with 20,000 installs within two hours. If you use Advanced Responsive Video Embedder, uninstall it now.
Security
3 min
July 26
WordPress 7.1 Lets You Layer a Gradient Over a Background Image
WordPress 7.1 finally lets you combine a color gradient with a background image on Group, Quote, and Pullquote blocks, no custom CSS needed.
Block Editor
3 min
July 24
Issue 11: AI found WordPress's worst RCE in years, attackers followed in 90 minutes
Attackers hit WordPress's critical RCE within 90 minutes of the patch. An AI found the flaw in 10 hours. WordPress 7.1 drops a feature over security fears.
Weekend Within roundup
5 min
July 24
WooCommerce POS Now Runs on iPhone for UK Stores
WooCommerce POS now runs on iPhone for UK stores. Take card payments with Tap to Pay, no extra hardware, and sync sales instantly to your store.
Commerce
2 min
July 23
Wordfence's AI Researcher Is Now Finding More WordPress Flaws Than Any Human
Wordfence's AI tool PRISM found 202 WordPress vulnerabilities since May and is now its top researcher. Keep auto-updates on as patches arrive faster.
Security
3 min
July 23
WordPress 7.1 Beta 3 Drops a Feature Over Security Worries, Fixes Media Upload Bugs
WordPress 7.1 Beta 3 drops Unicode email support over security concerns and fixes 71 bugs, including GIF and HEIC upload failures before August 19.
WordPress Updates
3 min