Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 18 / Weekend Within · September 11
Issue 18: A New Backstop for Bad Plugin Updates, and a Shake-Up at Automattic
WordPress.org now blocks malicious plugin updates before they ship. Automattic's board put founder Matt Mullenweg on leave, naming a new interim CEO.
Inside this issue
01
Security WordPress.org now automatically blocks a malicious plugin update before it reaches your site.
02
Accessibility WordPress is swapping its font-based admin icons for SVGs to fix screen reader and contrast issues.
03
Business Automattic's board put founder Matt Mullenweg on leave and named a new interim CEO.
Latest WordPress articles
Browse all WordPress articles September 14
Two Critical Flaws in The Events Calendar Can Hand Attackers Full Site Control
Two critical flaws in The Events Calendar let attackers take over a site with no login required. The plugin runs on 600,000+ sites. Update to 6.17.5.
Security
3 min
September 14
Attackers Are Exploiting a Critical Flaw in WooCommerce Wholesale Lead Capture
A critical flaw in WooCommerce Wholesale Lead Capture lets attackers upload malicious files without logging in. Update to 2.0.3.2 now.
Security
2 min
September 11
Issue 18: A New Backstop for Bad Plugin Updates, and a Shake-Up at Automattic
WordPress.org now blocks malicious plugin updates before they ship. Automattic's board put founder Matt Mullenweg on leave, naming a new interim CEO.
Weekend Within roundup
4 min
September 09
WordPress.org Now Holds Every Plugin Update for 6 Hours to Scan for Backdoors
WordPress.org now holds every plugin update for 6 hours to scan it for malware. The system already caught a backdoor in a 20,000-site plugin in July.
WordPress Updates
2 min
September 04
Issue 17: Five Critical Fixes and Two Flaws Under Attack
Five plugins shipped critical fixes this week. Two older flaws are under attack, and Rank Math paused a feature that created credentials without consent.
Weekend Within roundup
8 min
September 04
WordPress Is Replacing the Icons in Your Admin Bar and Menu
WordPress is replacing Dashicons with SVG icons in your admin bar and menu, fixing screen reader announcements and high-contrast display glitches.
Accessibility
3 min