Independent WordPress news for site owners
WordPress, explained for site owners.
WP Within explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 26 / Weekend Within · November 06
Issue 26: The Brotli Flaw Gets Worse, and Core Flaw Attacks Hit 240,000
Wordfence confirms the Brotli flaw can run code on a server. Attacks on the WordPress 7.1.4 flaw top 240,000, and CISA lists it as exploited.
Inside this issue
01
Security Brotli can run code on servers, and the 7.1.4 flaw is under heavy attack.
02
AI AI plugin 1.5.0 adds agent controls, and the Security Team builds bug-hunting tools.
03
WordPress Core 7.2 gets a /random/ URL, a Beta 4, and a proposed notification center.
04
Block Editor Gutenberg 24.3 formats text across blocks, and Playground clones your live site.
Latest WordPress articles
Browse all WordPress articles November 06
Issue 26: The Brotli Flaw Gets Worse, and Core Flaw Attacks Hit 240,000
Wordfence confirms the Brotli flaw can run code on a server. Attacks on the WordPress 7.1.4 flaw top 240,000, and CISA lists it as exploited.
Weekend Within roundup
4 min
November 05
WordPress 7.2 Adds a /random/ URL That Sends Visitors to a Random Post
WordPress 7.2 adds a /random/ URL that sends visitors to a random published post. It is on by default, so check whether you want it.
WordPress Updates
2 min
November 05
CISA Now Lists the WordPress Core Upgrade Flaw as Exploited, With 240,000+ Attempts Blocked
Attackers have tried 240,000+ times to exploit the WordPress core upgrade flaw, and CISA now lists it as exploited. Confirm you run 7.1.4.
Security
2 min
November 04
WordPress Playground Can Now Clone Your Live Site Into Your Browser
Playground can now copy your live site into your browser for safe testing. You need the Reprint plugin and admin access. Your live site is not changed.
Playground
3 min
November 04
A Proposed WordPress Notification Center Would Tame Cluttered Admin Notices
A proposed WordPress notification center would replace cluttered admin notices with a bell icon and pinned critical alerts. It is not shipping soon.
WordPress Updates
3 min
November 02
AI Plugin 1.5.0 Adds Text to Speech and an MCP Access Screen
AI plugin 1.5.0 adds six experiments, including text to speech and MCP Access, plus two security fixes. Update and review the settings.
WordPress + AI
3 min