Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 22 / Weekend Within · October 09
Issue 22: Three Plugins Under Attack, and WordPress Opens a Door for AI
Attackers are exploiting Bricksforge, Ninja Forms, and WPC Product Bundles. WordPress 7.1.3 fixes 7 flaws, and the MCP Adapter hits the plugin directory.
Inside this issue
01
Security Three plugins are under attack, and WordPress 7.1.3 fixes seven flaws.
02
AI The MCP Adapter lands in the plugin directory, and the AI plugin adds Markdown feeds.
03
Accessibility WordPress.org will not delist themes over the accessibility-ready tag.
04
Plugins Jetpack 16.3 adds video blocks, form logic, and a simpler settings layout.
Latest WordPress articles
Browse all WordPress articles October 13
All in One SEO Patched Two Security Flaws. Update to 5.0.2.1
All in One SEO, used on 2 million+ sites, patched two medium-severity flaws. Update to 5.0.2.1 or later to close both of them.
Security
2 min
October 12
A Critical Ghostscript Flaw Could Let a Crafted PDF Take Over Your WordPress Server
A critical Ghostscript flaw (CVSS 9.8) can let a crafted PDF run code on your server. There is no plugin to update, so ask your host if it is patched.
Security
2 min
October 09
Jetpack 16.3 Adds Video Blocks, Form Logic, and a New Features Tab
Jetpack 16.3 adds three video and scheduling blocks, form conditional logic, and a new Features tab. Update to see the reorganized settings.
Plugins
3 min
October 09
Issue 22: Three Plugins Under Attack, and WordPress Opens a Door for AI
Attackers are exploiting Bricksforge, Ninja Forms, and WPC Product Bundles. WordPress 7.1.3 fixes 7 flaws, and the MCP Adapter hits the plugin directory.
Weekend Within roundup
4 min
October 09
WooCommerce 11.2 Adds a Checkout Date Picker and Changes Who Gets Account Emails
WooCommerce 11.2 adds a checkout date picker, UPC-based imports, and sticky filters. Admin email copies and shop manager rights change.
Commerce
3 min
October 09
WordPress 7.2 Will Switch Off a Database Mode That Breaks Queries
WordPress 7.2 will switch off the NO_BACKSLASH_ESCAPES database mode to prevent broken queries. Most sites need to do nothing.
Hosting
2 min