Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 22 / Weekend Within · October 09
Issue 22: Three Plugins Under Attack, and WordPress Opens a Door for AI
Attackers are exploiting Bricksforge, Ninja Forms, and WPC Product Bundles. WordPress 7.1.3 fixes 7 flaws, and the MCP Adapter hits the plugin directory.
Inside this issue
01
Security Three plugins are under attack, and WordPress 7.1.3 fixes seven flaws.
02
AI The MCP Adapter lands in the plugin directory, and the AI plugin adds Markdown feeds.
03
Accessibility WordPress.org will not delist themes over the accessibility-ready tag.
04
Plugins Jetpack 16.3 adds video blocks, form logic, and a simpler settings layout.
Latest WordPress articles
Browse all WordPress articles October 09
Jetpack 16.3 Adds Video Blocks, Form Logic, and a New Features Tab
Jetpack 16.3 adds three video and scheduling blocks, form conditional logic, and a new Features tab. Update to see the reorganized settings.
Plugins
3 min
October 09
Issue 22: Three Plugins Under Attack, and WordPress Opens a Door for AI
Attackers are exploiting Bricksforge, Ninja Forms, and WPC Product Bundles. WordPress 7.1.3 fixes 7 flaws, and the MCP Adapter hits the plugin directory.
Weekend Within roundup
4 min
October 09
WooCommerce 11.2 Adds a Checkout Date Picker and Changes Who Gets Account Emails
WooCommerce 11.2 adds a checkout date picker, UPC-based imports, and sticky filters. Admin email copies and shop manager rights change.
Commerce
3 min
October 09
WordPress 7.2 Will Switch Off a Database Mode That Breaks Queries
WordPress 7.2 will switch off the NO_BACKSLASH_ESCAPES database mode to prevent broken queries. Most sites need to do nothing.
Hosting
2 min
October 08
Attackers Are Exploiting a Critical Bricksforge Flaw to Upload Code Without a Login
Attackers are exploiting a critical Bricksforge flaw that lets anyone upload and run PHP code without logging in. Update to 3.1.8.10 now.
Security
2 min
October 07
WordPress's MCP Adapter Plugin Is Now in the Plugin Directory
WordPress's MCP Adapter is now in the plugin directory, giving AI assistants a standard way into your site. It's experimental, so test first.
WordPress + AI
3 min