WordPress News & Coverage
The Wordfence Intelligence report for June 1-7, 2026, reveals 159 vulnerabilities in WordPress plugins and themes, highlighting ongoing risks and the importance of proactive security measures for agencies, hosts, and site operators.
WordPress 7.1 development begins with a focus on collaboration and responsive styling, Hub Tickets integrates branded email for support workflows, and EmDash hosting matures with key fixes. Agencies and developers should prepare for new workflows and integrations in this mid-2026 update.
Automated bot traffic surpassed human web traffic in 2025, driven by AI-powered bots that mimic real users with high sophistication. For WordPress professionals, this shift demands new strategies for security, performance, and bot management to protect sites and maintain operational stability.
Review Signal returns with its 2026 WordPress and WooCommerce hosting benchmarks after a three-year hiatus, now powered by a new open source load testing platform built specifically for WordPress workloads. This relaunch offers fresh, transparent insights critical for agencies, developers, and site operators reassessing hosting decisions in a rapidly evolving infrastructure landscape.
The WordPress Dev Chat on May 27, 2026, will focus on finalizing the WordPress 7.0 release and launching 7.1 development, featuring key accessibility improvements, PHP support clarifications, and Gutenberg 23.2 discussions that impact core workflows.
WordPress agencies are adopting Vibe Coding—a new AI-driven development approach using the Kinsta API and GitHub Copilot—to automate workflows like site cloning and onboarding. This method offers scalability and efficiency but requires strong technical expertise and rigorous validation.
A supply chain attack compromised the CDN-hosted JavaScript SDKs of OptinMonster, TrustPulse, and PushEngage, widely used WordPress marketing plugins. The injected client-side code silently created rogue admin accounts and backdoors by exploiting logged-in administrators' sessions. This incident highlights the risks of third-party CDN dependencies and requires immediate action from WordPress users to audit users, remove backdoors, and harden admin security.
Composable CMS architectures offer WordPress enterprises a modular path to AI and omnichannel delivery, but require balancing flexibility with operational stability to avoid complexity and performance pitfalls.
Enterprise WordPress hosting decisions often default to choosing large, recognizable vendors. However, trust in a hosting provider’s responsiveness, accountability, and WordPress expertise matters more than size alone. This article explores why operational trust impacts uptime, performance, security, and developer workflows more than brand recognition, and what enterprise teams should prioritize when selecting hosting partners.
WordPress contributors have launched an outreach program to prepare the real-time collaboration feature for WordPress 7.1. This initiative seeks early testers, especially hosting providers, to ensure the feature's stability and performance across diverse environments. Agencies and developers should prepare for significant changes impacting workflows and compatibility.
