163. Over 3,000 security reports in 2026
·
For a decade, WordPress’s HackerOne program received between 20 and 30 reports a month; this year it already exceeds 3,000, more than the previous twelve years combined.
·
For a decade, WordPress’s HackerOne program received between 20 and 30 reports a month; this year it already exceeds 3,000, more than the previous twelve years combined.
·
The WordPress Photos team has created PhotoFetch, a plugin that makes it quick and easy to search for royalty-free photos and add them to your website.
·
Getting good translations of the WordPress interface is harder than ever, and AI is to blame.
·
Connecting remotely to WordPress from your artificial intelligence tool can now be done natively with the MCP Adapter plugin.
·
A historic problem in WordPress is back: the users list can always be sorted by first name, but not by last name.
·
If you want to contribute to WordPress using AI, you can now connect to the Trac MCP server to find tickets, changesets, and everything you need to dig through the backlog of pending work.
·
We now know the roadmap for WordPress 7.2 — what’s being planned for this release, and what shouldn’t make it in.
·
While WebMCP is still a proposed Internet standard, it’s already been integrated into WordPress Playground for use with the ChatGPT desktop app, which supports it.
·
The icons that have displayed WordPress since version 3.8 appear set to disappear in WordPress 7.2, where they’ll be replaced with vector graphics.
·
WordPress is working on an encryption system for credentials stored in the system, both for connector APIs and those used by other plugins and tools.