WordPress news.

The latest from WordPress blogs, official and independent. Refreshed 21 minutes ago.

Yesterday

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026)Wordfence Security

Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week.

Nov5

Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress CoreWordfence Security

On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches...

This week

Nov3

Wordfence Price Increase Coming December 3, 2026Wordfence Security

On Thursday, December 3, 2026, pricing for Wordfence Premium, Care, and Response will increase.

Earlier

Oct30

WordPress doesn’t ship Brotli. It’s still exposed to CVE-2026-111497Patchstack Security

One unauthenticated POST to xmlrpc.php can take down a PHP worker on a stock WordPress install, and there is nothing unusual about the request that does it.

Oct28

WordPress 7.1.4 Security ReleasePatchstack Security

WordPress 7.1.4 came out on 28 October 2026 with fixes for what WordPress counts as 22 vulnerabilities across 17 advisories.

Oct21

Major security alert: PHP vulnerable to critical RCE, attacks ongoingPatchstack Security

PHP has released the fix. Update now. PHP has released security updates for two critical vulnerabilities that can allow unauthenticated remote code execution.

Sources: WordPress News, Make WordPress Core, Make WordPress AI, WordPress Developer Blog, Make WordPress Plugins, Make WordPress Test, WP Tavern, The WP Minute, Gutenberg Times, WP Mayor, WP Builds, Matt Mullenweg, Wordfence, Patchstack, WordPress.com Blog, WPBeginner, Kinsta, Pressable, Yoast, Elegant Themes, GeneratePress, Jetpack, WPMU DEV, WPKube, Meow Apps. Suggest a blog: it must be about WordPress and post at least once a month.

Give your agent today's WordPress.Free · Read-only · Nothing to install

https://todaywp.com/mcp

Show me where