Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 18 / Weekend Within · September 11
Issue 18: A New Backstop for Bad Plugin Updates, and a Shake-Up at Automattic
WordPress.org now blocks malicious plugin updates before they ship. Automattic's board put founder Matt Mullenweg on leave, naming a new interim CEO.
Inside this issue
01
Security WordPress.org now automatically blocks a malicious plugin update before it reaches your site.
02
Accessibility WordPress is swapping its font-based admin icons for SVGs to fix screen reader and contrast issues.
03
Business Automattic's board put founder Matt Mullenweg on leave and named a new interim CEO.
Latest WordPress articles
Browse all WordPress articles September 16
Gutenberg 24.0 Gives the Gallery Block a Real Grid Layout
Gutenberg 24.0 adds a customizable Gallery grid with per-breakpoint columns, post title revision tracking, and site titles that scale to fit.
Block Editor
3 min
September 16
Wordfence 9 Lets Your Site's Users Log In Without a Password
Wordfence 9 adds free passkey login, letting WooCommerce and WordPress users sign in with a fingerprint or face scan instead of a password.
Security
3 min
September 16
WordPress Retires Year-Named Themes for a New Default Called Ipsum
WordPress.org unveiled Ipsum, a minimal blank-canvas theme set to replace year-named defaults starting with WordPress 7.2. Test it now and give feedback.
WordPress Updates
3 min
September 14
Two Critical Flaws in The Events Calendar Can Hand Attackers Full Site Control
Two critical flaws in The Events Calendar let attackers take over a site with no login required. The plugin runs on 600,000+ sites. Update to 6.17.5.
Security
3 min
September 14
Attackers Are Exploiting a Critical Flaw in WooCommerce Wholesale Lead Capture
A critical flaw in WooCommerce Wholesale Lead Capture lets attackers upload malicious files without logging in. Update to 2.0.3.2 now.
Security
2 min
September 11
Issue 18: A New Backstop for Bad Plugin Updates, and a Shake-Up at Automattic
WordPress.org now blocks malicious plugin updates before they ship. Automattic's board put founder Matt Mullenweg on leave, naming a new interim CEO.
Weekend Within roundup
4 min