Independent WordPress news for site owners
WordPress, explained for site owners.
WP Within explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 25 / Weekend Within · October 30
Issue 25: Another Core Security Release, and a Plan to Make WordPress Agent-Ready
WordPress 7.1.4 is the seventh core security release since July. PHP attacks are climbing, and WordPress wants AI agents connecting by 7.3.
Inside this issue
01
Security WordPress 7.1.4 patches an upgrade-process flaw, and PHP attacks keep climbing.
02
AI The WordPress AI team wants any AI agent to connect with a simple sign-in.
Latest WordPress articles
Browse all WordPress articles November 02
AI Plugin 1.5.0 Adds Text to Speech and an MCP Access Screen
AI plugin 1.5.0 adds six experiments, including text to speech and MCP Access, plus two security fixes. Update and review the settings.
WordPress + AI
3 min
November 02
Wordfence Confirms the Brotli Flaw Can Run Code on a WordPress Server
Wordfence reproduced remote code execution on WordPress through the Brotli flaw, not just a crash. Ask your host to patch Brotli now.
Security
3 min
November 02
Gutenberg 24.3 Lets You Format Text Across Several Blocks at Once
Gutenberg 24.3 lets you format text across several blocks, react to notes with emoji, and see why a save failed. Test it on staging first.
Block Editor
3 min
October 30
A Server Library Flaw Can Crash WordPress Through One Anonymous Request
A server library flaw lets one anonymous request crash your PHP workers. WordPress has no update for it, so ask your host to patch Brotli.
Security
3 min
October 30
Issue 25: Another Core Security Release, and a Plan to Make WordPress Agent-Ready
WordPress 7.1.4 is the seventh core security release since July. PHP attacks are climbing, and WordPress wants AI agents connecting by 7.3.
Weekend Within roundup
3 min
October 30
Attackers Are Probing the WordPress 7.1.4 Upgrade Flaw. Check That You Updated
Attackers are probing the WordPress 7.1.4 upgrade flaw, and Wordfence says 22 flaws were fixed. Confirm your site updated to 7.1.4.
Security
2 min