Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 15 / Weekend Within · August 21
Issue 15: Zero Logins Needed
Three unauthenticated plugin flaws hit Elementor Pro, Forminator, and User Profile Builder this week. WordPress 7.1 also launched with responsive styling.
Inside this issue
01
Security Three unauthenticated plugin flaws could hand attackers full site control without a password.
02
WordPress Core WordPress 7.1 shipped at WordCamp US, and 7.2 already has a December release date.
03
AI WordPress's AI plugin adds in-editor translation and slug suggestions, plus a naming change to check.
04
Block Editor Gutenberg 23.8 adds shareable revision links and makes List View dramatically faster.
05
Business A plugin review study, a free WordPress.com student plan, and the community's first sentiment survey.
Latest WordPress articles
Browse all WordPress articles August 22
Two Critical Flaws in miniOrange SAML SSO Let Attackers Log In as Your Admin
Two critical flaws in the miniOrange SAML SSO plugin let attackers log in as your admin. Paid editions were missed by update checkers. Patch now.
Security
4 min
August 21
Critical Flaw in the Pods Plugin Lets Attackers Become Your Site Admin
A critical flaw in the Pods plugin lets attackers become your site admin without logging in. Update to version 3.3.9.1 now if you run Pods.
Security
3 min
August 21
Issue 15: Zero Logins Needed
Three unauthenticated plugin flaws hit Elementor Pro, Forminator, and User Profile Builder this week. WordPress 7.1 also launched with responsive styling.
Weekend Within roundup
7 min
August 21
WP Rocket Sites Crashed After WordPress 7.1, Fix Now Live
WP Rocket sites crashed after WordPress 7.1 launched, taking down over a third of one host's fleet. Update to WP Rocket 3.23.2.2 to fix it.
Performance
3 min
August 20
Critical Flaw in Elementor Pro Lets Attackers Take Over Your Site Without Logging In
An unauthenticated flaw in Elementor Pro lets attackers upload malicious files and take over your site. Update to version 4.2.2 now.
Security
3 min
August 20
WordPress 7.1 'Mary Lou' Is Here With Responsive Styling and a Rebuilt Image Editor
WordPress 7.1 is here with responsive design controls, a persistent admin bar, and a rebuilt image editor. Update now to get the new tools.
WordPress Updates
3 min