Independent WordPress news for site owners
WordPress, explained for site owners.
WP Within explains what changed in WordPress, who needs to care, and what to do next. Read the weekly Weekend Within roundup or explore practical articles on security, AI, updates, and more.
Latest WordPress news roundup
Read the latest roundup Issue 25 / Weekend Within · October 30
Issue 25: Another Core Security Release, and a Plan to Make WordPress Agent-Ready
WordPress 7.1.4 is the seventh core security release since July. PHP attacks are climbing, and WordPress wants AI agents connecting by 7.3.
Inside this issue
01
Security WordPress 7.1.4 patches an upgrade-process flaw, and PHP attacks keep climbing.
02
AI The WordPress AI team wants any AI agent to connect with a simple sign-in.
Latest WordPress articles
Browse all WordPress articles November 04
WordPress Playground Can Now Clone Your Live Site Into Your Browser
Playground can now copy your live site into your browser for safe testing. You need the Reprint plugin and admin access. Your live site is not changed.
Playground
3 min
November 04
A Proposed WordPress Notification Center Would Tame Cluttered Admin Notices
A proposed WordPress notification center would replace cluttered admin notices with a bell icon and pinned critical alerts. It is not shipping soon.
WordPress Updates
3 min
November 02
AI Plugin 1.5.0 Adds Text to Speech and an MCP Access Screen
AI plugin 1.5.0 adds six experiments, including text to speech and MCP Access, plus two security fixes. Update and review the settings.
WordPress + AI
3 min
November 02
Wordfence Confirms the Brotli Flaw Can Run Code on a WordPress Server
Wordfence reproduced remote code execution on WordPress through the Brotli flaw, not just a crash. Ask your host to patch Brotli now.
Security
3 min
November 02
Gutenberg 24.3 Lets You Format Text Across Several Blocks at Once
Gutenberg 24.3 lets you format text across several blocks, react to notes with emoji, and see why a save failed. Test it on staging first.
Block Editor
3 min
October 30
A Server Library Flaw Can Crash WordPress Through One Anonymous Request
A server library flaw lets one anonymous request crash your PHP workers. WordPress has no update for it, so ask your host to patch Brotli.
Security
3 min