WP2Shell exposed the first critical unauthenticated remote code execution vulnerability in WordPress core in nearly a decade, requiring immediate security updates across millions of websites.

WordPress patched a critical zero-day vulnerability called wp2shell that allowed attackers to compromise sites through a single anonymous web request, even on fresh installations without plugins.

WordPress patched critical wp2shell vulnerabilities allowing unauthenticated remote code execution on versions 6.9-7.0. The attack chain combines REST API confusion with SQL injection, requiring no preconditions to exploit.

Developers release open specification allowing webpages to expose machine-readable metadata for LLMs and AI crawlers, seeking community feedback on GitHub implementation.

WooCommerce navigates innovation and competition within a transforming WordPress ecosystem. The platform addresses technical challenges while pursuing strategic improvements to serve millions of online merchants worldwide.

Internet Archive releases WordPress plugin that automatically archives website content to the Wayback Machine. The tool enables seamless preservation of digital content without manual intervention for WordPress site owners.

WordPress 6.9 brings Block Bindings API and Terms Query Loop improvements for WooCommerce. Learn how to build a product category image block with minimal code using these new features.

WordPress Boost is a new open-source plugin by Thanos Eleftherakos that aims to optimize WordPress site performance through automated speed enhancements. The GitHub-hosted project provides a transparent alternative to commercial optimization tools.

A WordPress agency veteran launches PressMeGPT, an AI theme generator that creates actual WordPress themes from plain English descriptions, addressing plugin bloat and maintenance challenges he faced building 1,500 sites over 14 years.