Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 23 / Weekend Within · October 16
Issue 23: Patch Your Plugins, and Ask Your Host About Ghostscript
Backuply and All in One SEO need updates, and a critical Ghostscript flaw sits on your server, not in WordPress. Gutenberg 24.2 turns on React 19.
Inside this issue
01
Security Backuply and All in One SEO need updates, and Ghostscript needs a call to your host.
02
Block Editor Gutenberg 24.2 moves notes to a margin and turns on React 19.
03
Business WooCommerce 11.2 adds a checkout date picker and changes who gets account emails.
04
Accessibility WordPress pulled its planned fix for dashboard notices, so screen reader barriers remain.
Latest WordPress articles
Browse all WordPress articles October 20
WordPress 7.2 Beta 1 Is Out: Test Responsive Galleries, Notes, and Faster Admin
WordPress 7.2 Beta 1 adds responsive Gallery controls, text shadows, and faster admin screens. Test it on a staging site, not your live one.
WordPress Updates
3 min
October 19
Stolen UpdraftCentral Keys Are Being Used to Backdoor WordPress Sites
Stolen UpdraftCentral keys are letting an attacker install backdoors on WordPress sites. No update fixes it yet. Delete your keys now.
Security
4 min
October 17
Some Rank Math SEO PRO 3.0.123 Downloads Contained Malware. Update to 3.0.124
Some Rank Math SEO PRO 3.0.123 downloads contained malware. If you updated on Oct 15 or 16, treat your site as compromised and update to 3.0.124.
Security
3 min
October 16
Backuply Flaw Can Give Attackers Admin Access During a Restore. Update to 1.5.9
Update Backuply to 1.5.9 or later. A logged-in attacker can plant malicious data that takes over your site when you restore a database backup.
Security
1 min
October 16
Issue 23: Patch Your Plugins, and Ask Your Host About Ghostscript
Backuply and All in One SEO need updates, and a critical Ghostscript flaw sits on your server, not in WordPress. Gutenberg 24.2 turns on React 19.
Weekend Within roundup
4 min
October 16
WordPress Delays an Accessibility Fix for Dashboard Notices
WordPress has reverted planned dashboard notice improvements after false counts appeared. Screen reader users still face the existing barriers.
Accessibility
1 min