Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 24 / Weekend Within · October 23
Issue 24: Two Plugin Vendors Breached, and PHP Needs Patching
Rank Math and UpdraftPlus were breached, and PHP needs a server update. WordPress 7.2 Beta 1 is out, and MCP may be heading for core.
Inside this issue
01
Security Rank Math and UpdraftPlus were breached, and PHP needs a server-level update.
02
WordPress Core WordPress 7.2 Beta 1 arrives, and suggestion mode slips to 7.3.
03
AI MCP may become part of WordPress, and new benchmarks show agents skip it.
04
Accessibility Dashboard notice fixes were pulled back, so screen reader barriers remain.
Latest WordPress articles
Browse all WordPress articles October 23
Attacks on the New PHP Flaws Are Climbing. Update PHP and Restart It
Wordfence has blocked 74,000+ attempts to exploit the new PHP flaws, with no confirmed hacks yet. Update PHP and restart it.
Security
2 min
October 23
Issue 24: Two Plugin Vendors Breached, and PHP Needs Patching
Rank Math and UpdraftPlus were breached, and PHP needs a server update. WordPress 7.2 Beta 1 is out, and MCP may be heading for core.
Weekend Within roundup
4 min
October 22
UpdraftPlus Now Has a Fix for the Stolen-Key Attacks. Update and Reset Your Password
UpdraftPlus 1.26.13 and 2.26.13 now revoke stolen UpdraftCentral keys. Update, change your TeamUpdraft password, and check for rogue admins.
Security
3 min
October 21
Two Critical PHP Flaws Put WordPress Servers at Risk. Update PHP Now
Two critical PHP flaws can let attackers run code on your server without logging in. WordPress updates won't fix them. Update PHP now.
Security
3 min
October 20
WordPress 7.2 Beta 1 Is Out: Test Responsive Galleries, Notes, and Faster Admin
WordPress 7.2 Beta 1 adds responsive Gallery controls, text shadows, and faster admin screens. Test it on a staging site, not your live one.
WordPress Updates
3 min
October 19
Stolen UpdraftCentral Keys Are Being Used to Backdoor WordPress Sites
Stolen UpdraftCentral keys are letting an attacker install backdoors on WordPress sites. No update fixes it yet. Delete your keys now.
Security
4 min