Independent WordPress news for site owners
WordPress, explained for site owners.
WP Within explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 26 / Weekend Within · November 06
Issue 26: The Brotli Flaw Gets Worse, and Core Flaw Attacks Hit 240,000
Wordfence confirms the Brotli flaw can run code on a server. Attacks on the WordPress 7.1.4 flaw top 240,000, and CISA lists it as exploited.
Inside this issue
01
Security Brotli can run code on servers, and the 7.1.4 flaw is under heavy attack.
02
AI AI plugin 1.5.0 adds agent controls, and the Security Team builds bug-hunting tools.
03
WordPress Core 7.2 gets a /random/ URL, a Beta 4, and a proposed notification center.
04
Block Editor Gutenberg 24.3 formats text across blocks, and Playground clones your live site.
Latest WordPress articles
Browse all WordPress articles November 11
WordPress 7.2 Adds a Secrets API for Storing API Keys Encrypted
WordPress 7.2 adds a Secrets API that stores API keys encrypted. It is for plugin developers, but you can ask vendors whether they will use it.
WordPress Updates
3 min
November 11
WordPress 7.2 Adds Text Shadow Controls to Paragraph and Heading Blocks
WordPress 7.2 adds text shadow controls for Paragraph and Heading blocks and a Global Styles panel for presets. No code needed to use them.
Block Editor
3 min
November 10
WooCommerce Will Now Push Required Security Updates to Your Store, and PHP 8.1 Is Coming
WooCommerce will now push required security fixes to connected stores, even with auto-updates off. Check your version and your PHP.
Commerce
3 min
November 07
WooPayments Gets a Security Fix Across Every Version Line. Check Your Version
WooCommerce released a security fix for WooPayments across every version line. Check your version and update to 11.2.1 or the matching patch.
Security
2 min
November 06
Issue 26: The Brotli Flaw Gets Worse, and Core Flaw Attacks Hit 240,000
Wordfence confirms the Brotli flaw can run code on a server. Attacks on the WordPress 7.1.4 flaw top 240,000, and CISA lists it as exploited.
Weekend Within roundup
4 min
November 05
WordPress 7.2 Adds a /random/ URL That Sends Visitors to a Random Post
WordPress 7.2 adds a /random/ URL that sends visitors to a random published post. It is on by default, so check whether you want it.
WordPress Updates
2 min