#phpwordpress

WordPress 7.2 Beta 4 is available for testing. Check accessibility, editor reliability, and developer API updates in a local or test environment, not on a production site.

💻 WOOCOMMERCE DEVELOPER WANTED! I’m looking for someone who can build, optimize, and maintain high-performing e-commerce stores. Your responsibilities: → WooCommerce development → WordPress customization → Plugin integrations → Checkout optimization → Website speed improvements → Technical troubleshooting → Store maintenance I want someone who understands both technical performance and user experience. 📩 Follow me on this profile, repost this post, and DM me “WOOCOMMERCE” to apply.

"Entire Internet" on @BuiltWith shows a very different trend than @W3Techs! However, when you look at just the top 1M, the drop is similar. I wonder if the Google AI Mode effect @Reddit just mentioned dropped 15-20% of @WordPress sites from the top million.

WordPress Credits has arrived in Romania! 🇷🇴 More than 90 students at Titu Maiorescu University in Bucharest joined the launch, and the first group starts contributing to WordPress on November 1. Thank you to the university and the WordPress Bucharest community for the warm welcome. Explore the program:

🚨 PoC released: CVE-2026-116512 (CVSS 9.8), unauthenticated RCE in the Project Manager #WordPress plugin (<= 4.1.1). Unsanitized 'id' param reaches a PHP function call. No login needed. Update to 4.1.2. PoC: #CyberSecurity

I found & reported a #WordPress core pre-auth RCE (triggered during the update process) with @xint_official . I submitted it as a 0-day, but WordPress released a patch almost as soon as the reporting platform confirmed the vulnerability was valid. Missed the credit, but huge shoutout to Umut Bayram for reporting first! 🙌 Plot twist: updating to the fix can expose RCE. Here's why + safe update guide:

Starting a new project should take a minute, not an afternoon. Lerd new is a wizard: pick the framework and version, and lerd scaffolds it with the framework's own installer, links it, gives it a .test domain with HTTPS, writes the config files that framework reads, and takes it through setup. Laravel, Symfony, WordPress and the rest of the store are all there. Prefer clicking? Create the same site from the dashboard's Add a site dialog. #Laravel #Symfony

Looking to connect with: 📣 marketers 🛠️ vibe coders 🚀 indie / SaaS builders 🧩 WordPress people 🧠 AI builders shipping small What are you building? 👇

🚀 Looking for a Professional WordPress Developer! I need a skilled freelancer to build a modern, responsive WordPress website. 💰 Budget: $550 Interested? Follow me and DM your portfolio and previous work. Let's work together! 🤝

My WordPress site scored 5.8/10 for email deliverability. One plugin later: 9.8/10. If your contact form goes quiet, your customers already left. Choose @wpmailsmtp

Over 40% of modern websites are built on top of Content Management Systems like WordPress 🌐🔍 because outdated themes and forgotten plugins are a massive attack surface, security professionals use specialized tools like WPScan to run deep component audits instantly 🛡 Safe Local Sandbox [ 127.0.0.1:8080 ] #WPScan #WebSecurity #AppSec #InfoSecTips

WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release Update to 7.1.4 or your branch's fix as soon as possible.

Pollora: Run WordPress Inside a Laravel Application posted by @paulredmond

🆕 New CVE WordPress: stored xss in file upload component (CVE-2026-66570) An attacker can inject scripts that run in visitors' browsers, potentially hijacking sessions or acting as them. No patch listed yet

HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites Update Brotli to version 1.0.10, 1.1.1, 1.2.1 as soon as possible.

As I explained at WordCamp US, one of the challenges with session hijacking is that it's difficult to detect. Someone could be using your #WordPress website account without you knowing. That's why we've added a new option in Melapress Login Security to alert users of simultaneous sessions. With the latest update of the plugin users now receive email alerts when their account has simultaneous sessions, with an option to terminate all other sessions. Simple notifications like these give users more visibility and control over their accounts, thus increasing the chances of detecting hijacked sessions.

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades thehackernews.​com/2026/11/cisa-confirms-hackers-exploiting.​html

Over 2 days in October, students at Presidency University in Dhaka built 50 websites and profiles at WordPress Campus Connect, then talked through career paths in the WordPress ecosystem. The university has applied to join the WordPress Credits program. Here is how the 2 days came together.

WordPress 7.1 made the admin bar global, but it still feels out of place in the site editor. It's got me thinking about how a modernised admin bar could sit at the centre of everyday workflows: browsing your site, managing content, and editing in place. 🎥

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress