Independent WordPress news for site owners
WordPress, explained for site owners.
WPWithin explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 15 / Weekend Within · August 21
Issue 15: Zero Logins Needed
Three unauthenticated plugin flaws hit Elementor Pro, Forminator, and User Profile Builder this week. WordPress 7.1 also launched with responsive styling.
Inside this issue
01
Security Three unauthenticated plugin flaws could hand attackers full site control without a password.
02
WordPress Core WordPress 7.1 shipped at WordCamp US, and 7.2 already has a December release date.
03
AI WordPress's AI plugin adds in-editor translation and slug suggestions, plus a naming change to check.
04
Block Editor Gutenberg 23.8 adds shareable revision links and makes List View dramatically faster.
05
Business A plugin review study, a free WordPress.com student plan, and the community's first sentiment survey.
Latest WordPress articles
Browse all WordPress articles August 25
Critical Flaw in TranslatePress Lets Attackers Take Over Your Admin Account
An unauthenticated flaw in TranslatePress can hand attackers your admin's password reset link. It only triggers if a secondary language is active. Update now.
Security
3 min
August 25
WordPress Playground Can Now Run Any Version Back to 2003
WordPress Playground can now boot any version back to 0.7 from 2003, right in your browser. Test old plugins or check compatibility before an upgrade.
Playground
3 min
August 24
WordPress Accessibility Team Previews Its First Official Plugin
WordPress's Accessibility Team previews a plugin that flags skipped heading levels and inaccessible blocks in real time. Not installable yet.
Accessibility
3 min
August 22
Two Critical Flaws in miniOrange SAML SSO Let Attackers Log In as Your Admin
Two critical flaws in the miniOrange SAML SSO plugin let attackers log in as your admin. Paid editions were missed by update checkers. Patch now.
Security
4 min
August 21
Critical Flaw in the Pods Plugin Lets Attackers Become Your Site Admin
A critical flaw in the Pods plugin lets attackers become your site admin without logging in. Update to version 3.3.9.1 now if you run Pods.
Security
3 min
August 21
Issue 15: Zero Logins Needed
Three unauthenticated plugin flaws hit Elementor Pro, Forminator, and User Profile Builder this week. WordPress 7.1 also launched with responsive styling.
Weekend Within roundup
7 min