The free online event will run October 7–8 with talks on AI, development, design and keeping sites accessible, as organizers grapple with a lull in sponsorship.

For 42.6% of WordPress pros who’d experienced a security incident, it came to light when someone noticed the site acting strangely, not through a monitoring tool.

In this sponsored post, learn how to set up automated WhatsApp order notifications for your WooCommerce store.

Collaborative editing has been deliberately left off the roadmap, and the December release will be livestreamed instead of launched during the State of the Word.

Seven framed release albums, all gathering dust in McCarthy’s closet, are now up for bid, with every dollar going to the nonprofit run by the developer who built WordPress’s plugin system.

A recent Ninth Circuit ruling in a separate case about surgical robots has put WP Engine’s monopoly claims back in play, and with them the risk of triple damages for Automattic.

Attackers built probes from the patch diff and started scanning within hours of a fix for a critical WordPress core vulnerability that security engineer Robert Ressl first reported in July.

Find Meetup events, join groups, or start your own. Make new friends and connect with like-minded people. Meet people near you who share your interests.

Staff say questions in Slack have gone unanswered and an internal anonymous forum has been shut down. One employee describes anger, frustration, and feeling disrespected.

A year after withdrawing its first official block theme, WooCommerce says the time it spent improving core blocks and the editor made Purple worth bringing back.

More than 90 people contributed to WordPress 7.1.1, patching 11 vulnerabilities, including two reported by Anthropic and one by AI pentest firm pwn.ai.

Described as “an intentionally minimal blog theme that centers on a blank canvas to make your own, with built-in room for creativity,” WordPress’s next default theme is now available for testing.

There hasn’t been a single WordCamp run in the US this year outside the flagship. Automattic’s Karen Almassi has pitched a three-stage revival plan with new formats and no livestreams.

The Portuguese WordPress community is putting on a dedicated AI event in Faro on October 24, with two tracks and a bilingual program.

Contributors are closing in on replacing Meetup.com with an open source alternative that could save the WordPress Foundation over $200,000 a year.

Translating your WordPress site into 110+ languages doesn’t have to slow it down, as Ben Rojas writes in this sponsored post.

Automattic has confirmed Matt Mullenweg is back as CEO. But three executives are reportedly now gone, sources say there’s a new board, and employees are sharing what they really think on Blind.

Open source software which you can use to easily create a beautiful website, blog, or app.

Mullenweg broke a 42-year streak of not swearing, posted a hiring call on X, and told The Repository to “just wait and watch.”…

Automattic has denied nearly every allegation in the proposed customer class action, calling its actions legitimate and arguing Keller and Schanzer’s losses “resulted from their own choices.”…

AI and Jetpack Scan now review every plugin release during the Protect the Shire cooldown window, with risky updates blocked before they reach users.

WordPress co-founder Matt Mullenweg has returned to the release lead role following Anne McCarthy’s stint on 7.1. WordPress 7.2 is set for release in December.

Matt Mullenweg has accused CFO Mark Davies of conspiring with board members. Meanwhile, BlackRock’s latest filing has valued Automattic at 83% below its 2021 peak.

Organizer Brian Richards cancelled the September event, refunded everyone, including non-refundable travel, and is now betting on ticket sales alone for the June event.

It took a decade, four cities, and a seven-year gap to get here, but CloudFest Americas might finally be onto something.

WordPress media libraries can become heavier, slower and harder to manage as sites grow. In this sponsored post, Infinite Uploads owner Blake Whittle outlines three problems agencies should watch for.

After several years away, Serbia’s WordPress community is bringing WordCamp back to the capital with a two-day format designed to bring people together, in person.

He left Automattic thinking he was done with WordPress. Fourteen months later and after a lot of buzz, Andy Peatling has launched an AI design agent built entirely on native blocks.

Monthly reports to WordPress’s HackerOne program have surged from a decade-long baseline of 20–30 to 773 in August, prompting the WordPress Security Team to change what it will accept.

The Rank Math plugin created admin-level passwords and sent them to group.one’s servers before users accepted terms. Now, Matt Mullenweg wants mandatory audits for every plugin hosted on WordPress .

Charitable turns your WordPress site into a place where your nonprofit can collect donations without hiring a developer, writes David Bisset in this sponsored post.

The WordPress project has formalized a core security effort in response to 15x spike in reports and an unprecedented period of core security releases.

The team behind WordCamp Gdynia is going bigger and broader with CMS Conf, bringing 30+ speakers from across the CMS ecosystem — including Drupal, TYPO3 and EmDash — to the Polish seaside in November.

Last year’s debut drew 80 people and proved the concept. Now The Code Company is going it alone, with an AI-first program and a spot on the AI Week Sydney calendar.

A flawed “safe” unserialize function allows attackers to inject malicious serialized data that can ultimately be used to execute commands on the server.

More than 270 companies have asked US policymakers not to restrict open weight AI models. Automattic, GoDaddy, and now WordPress are among them.

After Wordfence reached out, Pods lead developer Scott Kingsley Clark immediately took the rest of the week off his day job to patch the CVSS 9.8-rated vulnerability in the free plugin.

A July 6 GitHub report identified the bug that led to fatal errors and suggested a fix. A post mortem reveals WP Rocket reviewed it, couldn’t reproduce it, and moved on.

WordPress currently has no first-class way to store a credential. A new proposal wants to fix that, with mandatory encryption and no off switch.

Wordfence launched an AI agent earlier this year that hunts wide. Now, it has one that hunts deep, and its first big find is a critical RCE in one of the most popular WordPress themes.

Austin Ginder says hosting companies aren’t testing core releases of WordPress, and has open-sourced a tool to make it easier.

Playground can now boot any of 55 WordPress versions in seconds, no old PHP runtimes, database configs, and local server stacks required.

The release lead’s post documents every major call made during the WordPress 7.1 cycle, and pulls back the curtain on why the on-stage launch at WCUS 2026 didn’t go to plan.

Automattic’s Anne McCarthy has released a prototype accessibility plugin with buy-in from the WordPress Accessibility Team, and a hard line against treating it as a substitute for accessibility in…

The Automattic CEO’s “Did your rocket explode?” post along with a pointed thread from the official WordPress X account have drawn weary backlash from the community.