Issue 24: Two Plugin Vendors Breached, and PHP Needs Patching
Rank Math and UpdraftPlus were breached, and PHP needs a server update. WordPress 7.2 Beta 1 is out, and MCP may be heading for core.
Issue 23: Patch Your Plugins, and Ask Your Host About Ghostscript
Backuply and All in One SEO need updates, and a critical Ghostscript flaw sits on your server, not in WordPress. Gutenberg 24.2 turns on React 19.
WordPress Delays an Accessibility Fix for Dashboard Notices
WordPress has reverted planned dashboard notice improvements after false counts appeared. Screen reader users still face the existing barriers.
Issue 22: Three Plugins Under Attack, and WordPress Opens a Door for AI
Attackers are exploiting Bricksforge, Ninja Forms, and WPC Product Bundles. WordPress 7.1.3 fixes 7 flaws, and the MCP Adapter hits the plugin directory.
WordPress.org Won't Delist Themes Over the Accessibility-Ready Tag After All
WordPress.org will not delist themes over the accessibility-ready tag. It will become an opt-in listing that can be removed if a theme falls short.
Issue 18: A New Backstop for Bad Plugin Updates, and a Shake-Up at Automattic
WordPress.org now blocks malicious plugin updates before they ship. Automattic's board put founder Matt Mullenweg on leave, naming a new interim CEO.
WordPress Is Replacing the Icons in Your Admin Bar and Menu
WordPress is replacing Dashicons with SVG icons in your admin bar and menu, fixing screen reader announcements and high-contrast display glitches.
WordPress Accessibility Team Previews Its First Official Plugin
WordPress's Accessibility Team previews a plugin that flags skipped heading levels and inaccessible blocks in real time. Not installable yet.
Issue 14: When a PNG Isn't a PNG
WordPress 7.0.4 patches an Imagick RCE flaw, its third security release in weeks. Two plugin backdoors hit official update channels this week too.
Matt Mullenweg Calls WordPress's Theme Accessibility Overhaul 'Permanently Delayed'
Matt Mullenweg says a WordPress theme accessibility overhaul is permanently delayed, leaving theme authors unclear on a September delisting deadline
WordPress 7.1 Adds Tooltips to Explain Icon-Only Buttons in Your Admin Screens
WordPress 7.1 adds hover tooltips and an info button to icon-only admin controls, plus an explainer for the login screen's Remember Me checkbox.