Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 23 / Weekend Within · October 16
Issue 23: Patch Your Plugins, and Ask Your Host About Ghostscript
Backuply and All in One SEO need updates, and a critical Ghostscript flaw sits on your server, not in WordPress. Gutenberg 24.2 turns on React 19.
Inside this issue
01
Security Backuply and All in One SEO need updates, and Ghostscript needs a call to your host.
02
Block Editor Gutenberg 24.2 moves notes to a margin and turns on React 19.
03
Business WooCommerce 11.2 adds a checkout date picker and changes who gets account emails.
04
Accessibility WordPress pulled its planned fix for dashboard notices, so screen reader barriers remain.
Latest WordPress articles
Browse all WordPress articles October 16
Backuply Flaw Can Give Attackers Admin Access During a Restore. Update to 1.5.9
Update Backuply to 1.5.9 or later. A logged-in attacker can plant malicious data that takes over your site when you restore a database backup.
Security
1 min
October 16
Issue 23: Patch Your Plugins, and Ask Your Host About Ghostscript
Backuply and All in One SEO need updates, and a critical Ghostscript flaw sits on your server, not in WordPress. Gutenberg 24.2 turns on React 19.
Weekend Within roundup
4 min
October 16
WordPress Delays an Accessibility Fix for Dashboard Notices
WordPress has reverted planned dashboard notice improvements after false counts appeared. Screen reader users still face the existing barriers.
Accessibility
1 min
October 14
Gutenberg 24.2 Moves Notes Beside Your Content and Turns On React 19
Gutenberg 24.2 moves editor notes into a side margin, sorts galleries, and switches on React 19 by default. Test it on staging first.
Block Editor
3 min
October 13
All in One SEO Patched Two Security Flaws. Update to 5.0.2.1
All in One SEO, used on 2 million+ sites, patched two medium-severity flaws. Update to 5.0.2.1 or later to close both of them.
Security
2 min
October 12
A Critical Ghostscript Flaw Could Let a Crafted PDF Take Over Your WordPress Server
A critical Ghostscript flaw (CVSS 9.8) can let a crafted PDF run code on your server. There is no plugin to update, so ask your host if it is patched.
Security
2 min