WooCommerce 11.​3 beta is available for testing ahead of its November 9 release. Sale badges can now display discount amounts or percentages, and blocks gain expanded colour and spacing controls. @WooCommerce #WordPress #WooCommerce #Plugins

Two critical PHP security vulnerabilities have been patched. If your site runs PHP, update now. Sites on PHP below 8.​2 have no patch available and may need to go offline until they can upgrade. #WordPress #Security #PHP

The WordPress core team wants your feedback on how release roadmaps are structured. The survey is open to everyone, from developers to everyday site owners, and closes November 16th. #WordPress #OpenSource #Community

Installing a security plugin is not a security strategy. Melapress's 2026 survey found most WordPress pros still have no breach recovery plan, and a restored backup won't fix the vulnerability that caused the hack. #WordPress #Security #AI

WooCommerce 11.​3 removes the old /wp-json/woocommerce/mcp endpoint. If you connected an AI assistant to your store via that endpoint and a REST API key, you need to migrate to the MCP Adapter plugin and an application password before upgrading. #WordPress #WooCommerce

Two WordPress core security releases and two WooCommerce patches dropped in September. Update those before anything else, then decide how much AI access you want over your admin. #WordPress #AI

WooCommerce 11.​3 adds an experimental Extensible Abilities API. Extensions can now attach custom fields, filters, and validators to core product and order abilities without duplicate registrations. @WooCommerce #WordPress #WooCommerce #Plugins

Two critical PHP flaws allow remote code execution, and exploit details leaked before the patches dropped. Check your PHP version now and update to a patched release. #WordPress #Security #PHP

WordPress co-founder Matt Mullenweg has ousted long-time accessibility contributor Andrea Fercia and ordered six years of admin notice work reverted. The move has sparked widespread criticism across the WordPress community. #WordPress #a11y #OpenSource

Two critical PHP vulnerabilities with a 9.​2 severity score allow unauthenticated attackers to run code on your server. Updating WordPress won't fix it, your host needs to patch PHP and restart it. #WordPress #Wordfence #Security

Two critical PHP vulnerabilities allow unauthenticated remote code execution. Patches are out for PHP 8.​5.​12, 8.​4.​27, 8.​3.​36, and 8.​2.​35. Check your PHP version and update now. #WordPress #PHP #Security

Is a WordPress business with $60K ARR and 24 clients worth $200K? Recurring revenue is just one factor. Owner dependency, documented processes, and client retention all affect what a buyer will actually pay. #WordPress #AI #Opinions

40-50 articles a day across Google Docs, Slack, and email is where standard WordPress starts to buckle. Newsroom is built for exactly that scale. #WordPress #Plugins

AI can write WordPress code fast, but can it decide whether that code belongs in production? Four developers explain where human judgment still leads the process. #WordPress #AI #Security

WordPress 7.​2 Beta 1 is available for testing. It adds a Secrets API, text shadow controls, and responsive design tools. Final release is December 8, 2026. #WordPress #WordPress72 #Gutenberg

WooCommerce has moved Purple theme development into its main monorepo, retiring the standalone woo-themes repo. Existing Purple installations are unaffected. Contributors should now work in the themes/purple/ directory. @WooCommerce #WordPress #WooCommerce #OpenSource

The Tainacan digital archive project dropped its in-house WordPress theme in favour of Blocksy to serve multiple Brazilian cultural institutions from one shared theme base, each with a completely different visual identity. #WordPress #a11y #OpenSource

Team Updraft confirmed a breach on October 18 that exposed UpdraftCentral connection keys, allowing a backdoor plugin to be silently installed on WordPress sites via the remote management channel. Check your logs and rotate your keys now. #WordPress #Security #Opinions

A freelancer used Claude to build and ship a WordPress CRM plugin, then hit the plugin review process, which caught a CSV sanitization issue the AI missed. A clear-eyed case study on where AI-assisted plugin development still needs a human in the loop. #WordPress #AI

WordPress AI plugin 1.​4.​0 is out. New Markdown feeds let AI tools and language models consume your content more cleanly, comment moderation gains a value score, and vector infrastructure expands for future semantic search features. #WordPress #AI #a11y