Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 12 / Weekend Within · July 31
Issue 12: WordPress's New Safety Net Just Passed Its First Real Test
A plugin backdoor never reached a single WordPress site, but WP2Shell attacks have topped 11 million attempts. WordPress 7.1 nears its August 19 release.
Inside this issue
01
Security A plugin backdoor never shipped, and WP2Shell attacks pass 11 million attempts.
02
Block Editor WordPress 7.1 adds gradient backgrounds and pauses a feature ahead of its August 19 release.
03
Commerce WooCommerce POS now runs on iPhone with Tap to Pay for UK stores.
04
Community WordPress Credits' first student survey shows high satisfaction but a retention gap after graduation.
Latest WordPress articles
Browse all WordPress articles August 05
Patchstack: WordPress.org Holds Security Patches as Long as Cosmetic Updates
Patchstack found WordPress.org holds critical security patches for the same delay as cosmetic updates, leaving known flaws exposed for hours longer.
Security
4 min
August 05
WooCommerce 11.0 Speeds Up Product Pages, Changes How Refunds Count in Reports
WooCommerce 11.0 speeds up product pages and checkout, fixes refund reporting by month, and lets guest buyers link past orders to a new account.
Commerce
4 min
August 05
WordPress 7.1 Lets You Style Button Hover and Focus Colors Without Code
WordPress 7.1 lets you set hover and focus colors on Button and Navigation Link blocks from Global Styles, no custom CSS needed.
Block Editor
3 min
August 05
WordPress 7.1 Release Candidate 1 Is Out, Final Release Still Set for August 19
WordPress 7.1 Release Candidate 1 is out, with the final release locked for August 19. Test it on a staging site before it reaches your dashboard.
WordPress Updates
3 min
August 04
Critical Flaw in WooCommerce Social Login Lets Anyone Log In as Your Admin
A critical flaw in WooCommerce Social Login lets attackers log in as any user, including admins, by faking an Apple sign-in token. Update to 2.8.8 now.
Security
3 min
August 03
WordPress 7.1 Adds Tooltips to Explain Icon-Only Buttons in Your Admin Screens
WordPress 7.1 adds hover tooltips and an info button to icon-only admin controls, plus an explainer for the login screen's Remember Me checkbox.
Accessibility
2 min