Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 21 / Weekend Within · October 02
Issue 21: One Click Makes a Rogue Admin, and Few Have a Recovery Plan
A critical Elementor flaw lets one clicked link create a rogue admin. Update to 4.3.2. Only 27.9% of WordPress pros have a hack recovery plan.
Inside this issue
01
Security Elementor needs a patch now, and most WordPress pros have no hack recovery plan.
02
Block Editor Gutenberg 24.1 spreads the same design tools across nearly every block.
03
WordPress Playground previews plugin emails, and the 7.2 release moves to a livestream.
Latest WordPress articles
Browse all WordPress articles October 08
Attackers Are Exploiting a Critical Bricksforge Flaw to Upload Code Without a Login
Attackers are exploiting a critical Bricksforge flaw that lets anyone upload and run PHP code without logging in. Update to 3.1.8.10 now.
Security
2 min
October 07
WordPress's MCP Adapter Plugin Is Now in the Plugin Directory
WordPress's MCP Adapter is now in the plugin directory, giving AI assistants a standard way into your site. It's experimental, so test first.
WordPress + AI
3 min
October 06
Attackers Are Exploiting Ninja Forms and WPC Product Bundles to Plant Hidden Admins
Attackers are exploiting Ninja Forms and WPC Product Bundles flaws to plant hidden admin accounts. Update, then check for rogue users.
Security
3 min
October 06
WordPress 7.1.3 Fixes 7 Security Flaws, Including Exposed Private Comments
WordPress 7.1.3 fixes 7 security flaws, including stored XSS in comment moderation and exposed private comments. Update your site now.
Security
2 min
October 06
WordPress's AI Plugin 1.4.0 Adds Markdown Feeds and a Comment Value Score
AI plugin 1.4.0 adds opt-in Markdown feeds for AI tools and a Comment Value score for moderation. Update if you use the plugin.
WordPress + AI
2 min
October 05
WordPress.org Won't Delist Themes Over the Accessibility-Ready Tag After All
WordPress.org will not delist themes over the accessibility-ready tag. It will become an opt-in listing that can be removed if a theme falls short.
Accessibility
2 min