100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in AI Engine WordPress Plugin
On October 4th, 2025, we received a submission for a Sensitive Information Exposure vulnerability in AI Engine, a WordPress plugin with more than 100,000 active installations. This vulnerability can be exploited by unauthenticated attackers to extract the bearer token and… Continue Reading →
WordPress 6.9 Beta 3 is available for download and testing! This beta version of the WordPress software is still under development. Please don’t install, run, or test this version of WordPress on production or mission-critical websites. Instead, you can evaluate… Continue Reading →
Migrating servers is a complex process that involves many moving parts. One of the most challenging aspects of server migration is dealing with DNS propagation. When you update your DNS records to point to a new server, it can take… Continue Reading →
In previous posts on this blog, we have explored WordPress block development from various angles. We have examined the development of both static and dynamic blocks and extended the functionality of core blocks. However, the approach we have taken so… Continue Reading →
Master the complete workflow for translating WordPress sites with this Private Translation Cloud tutorial. From initial setup through publishing, learn how to use PTC’s context-aware AI within WPML to create translations that match your brand voice and maintain technical accuracy…. Continue Reading →
The Themes team is seeking representatives for the year 2026. It’s time to submit your nominations! Please leave a comment in the section below to nominate a team member. Based on the nominations, two or three representatives will be selected… Continue Reading →
On Thursday, October 30, 2025, 15:00 UTC, a team meeting started in #accessibility facilitated by @krupajnanda. You can read the full transcript or see the meeting agenda. WordPress 6.9 Release Party Schedule Help Test WordPress 6.9 WordPress 6.9 Beta 2 WP A11y Docs update October 2025 Updates… Continue Reading →
On October 11th, 2025, we received a submission for an Account Takeover via Email Log Disclosure vulnerability in Post SMTP, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for an unauthenticated attacker to view… Continue Reading →
Divi 5‘s modern design tools make it easy to build clean, conversion-focused pricing layouts. In this free pack, you’ll find 11 Pricing Menus — each available in a Styled version for a polished look out of the box and an… Continue Reading →
Kinsta evolves with customer needs, business realities and challenges of the modern web LOS ANGELES — November 3, 2025 — Kinsta, a leading managed hosting provider for WordPress, is announcing new bandwidth-based hosting plans alongside its existing visitor-based plans. The… Continue Reading →
Divi 5 continues to add features that make it easier to design right inside the builder. The Group Carousel Module is one of them. It lets you build swipeable carousels that slide smoothly into your layouts. You can use it… Continue Reading →
If you’ve spent any amount of time building websites with WordPress and/or WooCommerce, you know that it can be time-consuming to display your content the way you actually want. With the combination of Divi 5‘s Loop Builder and Theme Builder,… Continue Reading →
What are the best social media scheduling tools on the market? We wanted to find out, so we tested out all of the leading social media schedulers to see what…
We are happy to announce that Kinsta is attending Web Summit from November 10-13 at the MEO Arena in Lisbon. As one of Europe’s largest tech events, Web Summit brings together global tech leaders and new voices to connect and… Continue Reading →
Popups get a bad reputation, but that’s only because most websites misuse them. When you build them with purpose and timing in mind, they turn casual browsers into subscribers and window shoppers into buyers. We’ll show you five ways to… Continue Reading →
Responsive grids shouldn’t require dozens of media queries and custom CSS overrides. But until recently, that’s exactly what most page builders demanded. Divi 5’s CSS Grid framework changes that, providing you with layouts that adapt fluidly across screen sizes without… Continue Reading →
Black Friday is one of the busiest shopping weekends of the year for WooCommerce stores. It’s also one of the most stressful. A sudden wave of shoppers can push your site to its limits, causing slow load times, errors at… Continue Reading →
This is the proposed agenda for the bi-weekly Accessibility Team meeting on Thursday, October 30, 2025, 15:00 UTC WordPress 6.9 Release Party Schedule Help Test WordPress 6.9 WordPress 6.9 Beta 2 WP A11y Docs update October 2025 Updates from the working group… Continue Reading →
On September 25th, 2025, we received a submission for a Privilege Escalation vulnerability in WP Freeio, a WordPress plugin bundled in the Freeio premium theme with more than 1,700 sales. This vulnerability makes it possible for an unauthenticated attacker to… Continue Reading →
As an important part of the internet, the WordPress community, actively thinks about the security of the ecosystem. Community members, developers, specialized companies, and independent researchers all play a role in maintaining the security of the environment. In the Plugins… Continue Reading →
Grid recently became an integrated part of Divi 5, bringing a different approach to building layouts. Grid gives you control over both horizontal and vertical placement simultaneously. That flexibility comes with a trade-off: there are way more settings to understand…. Continue Reading →
The Wordfence Threat Intelligence Team recently discovered a sophisticated malware campaign targeting WordPress e-commerce sites, specifically those using the WooCommerce plugin. This malware exhibits advanced features including custom encryption methods, fake images used to conceal malicious payloads, a robust persistence… Continue Reading →
In this report, 118 vulnerabilities have been publicly disclosed. Security patches for 66 of these plugins and themes are now available. Please run these updates as soon as possible. If you’re a Solid Security Pro user, the version management tool… Continue Reading →
Want to turn your audience into your biggest marketing asset? User-generated content, or UGC, makes it possible. When used well, it builds trust, grows your community, and fills your content…
Want to learn how to create a video marketing strategy? I’ve got you covered. Around 82% of all internet traffic now goes to video content, making video a marketing channel…
This update informs you about: publishing of new documentation has started; the accessibility of wpaccessibility.org itself; presentations at WP Meetups about the project; how you can help. Accessibility information for web forms We started publishing documentation in the section Standards… Continue Reading →
“What’s new in Gutenberg…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with… Continue Reading →
As an agency, you’re responsible for making sure every dollar counts when you run ads. Clients expect results, not excuses. However, when a landing page loads too slowly, all that carefully planned ad spend starts slipping through the cracks. A… Continue Reading →
A steps carousel provides an effective way to display information in a structured, easy-to-follow format. With the new Group Carousel module in Divi 5, creating a steps carousel is easier than ever. This new module enables you to create custom… Continue Reading →
On October 3rd, 2025, we received a submission for an Arbitrary File Read vulnerability in Anti-Malware Security and Brute-Force Firewall, a WordPress plugin with more than 100,000 active installations. This vulnerability makes it possible for an authenticated attacker, with subscriber-level… Continue Reading →
