#phpwordpress

WordPress 7.2 Beta 4 is available for testing. Check accessibility, editor reliability, and developer API updates in a local or test environment, not on a production site.

WordPress 7.1.4 is now available. This security release fixes multiple issues, and site owners should update immediately. Update from the WordPress Dashboard or download the release.

The AI plugin 1.5.0 is now available. New experiments let you generate audio for a post, see what changed between revisions, and check uploaded images for C2PA Content Credentials. The release also includes security fixes, so update when you can.

Asked Claude to redesign my blog at with static HTML so I could move away from WordPress... What do you think?

Starting a new project should take a minute, not an afternoon. Lerd new is a wizard: pick the framework and version, and lerd scaffolds it with the framework's own installer, links it, gives it a .test domain with HTTPS, writes the config files that framework reads, and takes it through setup. Laravel, Symfony, WordPress and the rest of the store are all there. Prefer clicking? Create the same site from the dashboard's Add a site dialog. #Laravel #Symfony

🚨 Nearly 63,000 attack attempts target a WordPress RCE flaw in just 24 hours. Attackers are repeatedly probing upgrade paths, trying to catch a brief window during core updates that could allow unauthenticated code execution. Details ↓

Hello everyone! 👋 I'm Umesh. I've spent years building WordPress themes, plugins, and products that help businesses build websites, capture leads, and grow. Now, I'm exploring new opportunities in the Shopify and SaaS ecosystems while continuing my WordPress journey. 🚀 I'm looking to #connect with: • SaaS founders & indie hackers • Solo entrepreneurs & startup teams • Developers & product creators • Shopify app developers & merchants • AI & automation enthusiasts • Marketers & growth specialists • People focused on customer acquisition, lead generation & distribution Building something, exploring an idea, or figuring out how to grow your product? 👇 Reply with what you're working on! Let's exchange ideas, learn from each other, and explore opportunities to collaborate. Looking forward to meeting more amazing people here! 🤝 #SaaS #IndieHackers #BuildInPublic #Startups #Shopify #Founders #Doers #Builders #AI #automation #lead #busienss #grow

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades thehackernews.​com/2026/11/cisa-confirms-hackers-exploiting.​html

Six months ago I joined Clarylife Mentorship Program. This week I finished, with an approved capstone and specialist standing in Web Systems & Digital Engineering 🎓 I'm a frontend dev and thought WordPress was just for blogs.

Seeking a WordPress developer. Please inform.

🚨 PoC released: CVE-2026-116512 (CVSS 9.8), unauthenticated RCE in the Project Manager #WordPress plugin (<= 4.1.1). Unsanitized 'id' param reaches a PHP function call. No login needed. Update to 4.1.2. PoC: #CyberSecurity

🤗

"Entire Internet" on @BuiltWith shows a very different trend than @W3Techs! However, when you look at just the top 1M, the drop is similar. I wonder if the Google AI Mode effect @Reddit just mentioned dropped 15-20% of @WordPress sites from the top million.

I found & reported a #WordPress core pre-auth RCE (triggered during the update process) with @xint_official . I submitted it as a 0-day, but WordPress released a patch almost as soon as the reporting platform confirmed the vulnerability was valid. Missed the credit, but huge shoutout to Umut Bayram for reporting first! 🙌 Plot twist: updating to the fix can expose RCE. Here's why + safe update guide:

A month ago, I made a move. Without any help from anyone, just believe in my grind iPhone 13 secured. One goal at a time, one win at a time. More to come. God did! ❤️ Wordpress did! Believe in your hustle!

SMPPCenter's WordPress SMS plugin is a scoped build, not a download. $100 to $1,000+. You own the source. Any documented gateway API. #WordPressSMS #SMSPlugin #CPaaS #WooCommerce

A big client project has moved to next year, so I suddenly have room in my schedule. #WordPress and #Laravel developer since 2011: websites, WooCommerce, custom plugins, API integrations, Laravel apps and optimisation. Have a project, or know someone who does? My DMs are open.

Would you still start a new WordPress site on a page builder? We moved fooplugins .com off Elementor in June, and built our own FSE theme with custom blocks using codex. It's been way faster since, and we're not going back!

We asked 7 WordPress MCP servers to permanently delete a published post. Only 1 stopped and asked first. 😬 MCP servers let @ClaudeAI or @ChatGPT make changes on your WordPress site instead of only giving advice. That's a huge time saver. But the AI can only do what your server lets it do, and some servers will delete content for good without checking with you. We set up a test store and gave the same 6 tasks to every server, then checked each result on the site ourselves. Here's what we found: 🛑 Permanent Deletes: paused and sent an approval link. Four others deleted the post without asking. 🤖 The AI App Won't Always Save You: Claude refused on its own, but ChatGPT showed one permission box that described a search, then deleted the post. 🔍 "Saved" Doesn't Mean Saved: One server reported SEO changes as saved and verified, but the live pages never changed. 🧰 More Tools Isn't Better: Royal MCP gave the AI 270 tools, and 154 of them were for plugins that weren't even installed. See the full test results and find the right server for your site 👇 (Link is in the comments below)

🆕 New CVE WordPress: stored xss in file upload component (CVE-2026-66570) An attacker can inject scripts that run in visitors' browsers, potentially hijacking sessions or acting as them. No patch listed yet