← Feed

Posts

• View post

  I built my new portfolio site with Beaver Builder AI, and it was like briefing a designer who'd known me for years and getting back a site that feels like me. Find out more in this sponsored post. 🔗 https://www.therepository.email/hands-on-with-beaver-builder-ai-design-systems-claude-and-a-very-late-night

• View post

  Automattic's servers will include an X-Remembering header in Eric Binnion's honor for 30 days, as colleagues remember his 12 years of work across Jetpack, https://wordpress.com and Woo. 🔗 https://www.therepository.email/wordpress-community-mourns-eric-binnion-longtime-automattic-engineer-and-core-contributor

• View post

  Days after six years of accessibility work finally landed in core, Matt Mullenweg ordered it reverted, and Andrea Fercia's https://wordpress.org account was briefly banned. 🔗 https://www.therepository.email/matt-mullenweg-orders-accessibility-revert-tells-core-committer-to-contribute-your-talents-to-another-project

• View post

  Automattic’s new lawyers asked for more time to get up to speed on the case. The judge said no, and now they’re scrambling to question expert witnesses before the first summary judgment deadline. 🔗 https://www.therepository.email/automattics-new-lawyers-lose-bid-for-more-time-in-legal-fight-with-wp-engine

• View post

  Out now: The Repository #322 🗞️ ♿ Matt Mullenweg tells accessibility contributor Andrea Fercia to contribute elsewhere 🕯️ Automattic engineer Eric Binnion remembered as "the kindest soul" Plus lots more news & our latest poll. 🔗 https://www.therepository.email/323

• View post

  Seven years after Feature Notifications (originally called WP Notify) was first proposed as a solution for admin nags in WordPress, the project is finally on track for a working release in December. 🔗 https://www.therepository.email/feature-notifications-project-returns-after-three-year-pause-with-plans-to-ship-a-functional-mvp-in-december

• View post

  An attacker is using UpdraftCentral keys stolen from TeamUpdraft to backdoor WordPress sites, including some never knowingly connected. A fix is out, but TeamUpdraft hasn't explained how the breach happened. 🔗 https://www.therepository.email/attacker-uses-stolen-updraftcentral-keys-to-backdoor-wordpress-sites-after-teamupdraft-breach

• View post

  Rank Math says several hundred customers downloaded a tampered copy of its PRO plugin during an 11-hour window, and has released a clean version alongside recovery steps. 🔗 https://www.therepository.email/rank-math-confirms-system-breach-delivered-malware-to-several-hundred-pro-customers

• View post

  Inspry's using Pressable MCP to diagnose support tickets before a human opens them, while MAXBURST audits 200-plus sites in under 45 minutes. We look at how they're doing it in this sponsored post. 🔗 https://www.therepository.email/its-not-rocket-science-how-two-agencies-handed-their-grunt-work-to-pressable-mcp

• View post

  A site claiming to publish working exploit code went public hours before PHP's 14:00 UTC patch, and hosting companies are reportedly moving to disable a PHP setting in response. 🔗 https://www.therepository.email/exploit-claims-surface-ahead-of-critical-php-security-release-as-wordpress-hosts-scramble

• View post

  Beyond Notes and the Secrets API, Beta 1 brings text shadows, form styling, and an On This Day widget that resurfaces posts from the same date in past years. 🔗 https://www.therepository.email/wordpress-7-2-beta-1-out-now-with-secrets-api-and-notes-upgrades-punts-suggestion-mode-to-7-3

• View post

  From WordPress .com to Rocket .net, hosting companies in the WordPress space blocked attacks with mitigations before rolling out patched versions of PHP, with some still patching well into Thursday. 🔗 https://www.therepository.email/php-patches-critical-php2shell-vulnerabilities-as-hosts-across-the-wordpress-ecosystem-race-to-protect-customers

• View post

  AI agents named WordPress as an option for about half the sites they were asked to build, then didn't use it. When asked to make changes to an existing WordPress site, they completed 79% of tasks without the MCP Adapter, and none with it. 🔗 https://www.therepository.email/new-benchmarks-find-ai-agents-overlook-wordpress-and-cant-complete-tasks-via-the-official-mcp-adapter

• View post

  Two weeks after launching the WordPress MCP Adapter as a canonical plugin on https://wordpress.org, the AI Team has been given the green light to make MCP a default part of WordPress. 🔗 https://www.therepository.email/wordpress-ai-team-moves-to-make-mcp-a-default-part-of-wordpress-with-7-3-floated-as-a-target

• View post

  Out now: The Repository #324 🗞️ 🚨 PHP2Shell panic outpaced the evidence, says Wordfence CEO 🤖 WordPress AI team gets green light to build MCP into core 🔑 Stolen UpdraftCentral keys used to backdoor sites Plus lots more news & our latest poll. 🔗 https://www.therepository.email/324

• View post

  Automattic's About page shows the company has shrunk from 2,065 staff in 2022 to 1,385 today, and its headcount has fallen more each month since July. 🔗 https://www.therepository.email/automattics-latest-layoffs-hit-a-workforce-already-a-third-smaller-than-its-2022-peak

• View post

  WordPress 7.2 Beta 2 is available for testing, with DataViews and DataForm updates, admin asset and icon changes, client-side media improvements, and a December 8 release date. 🔗 https://www.therepository.email/wordpress-7-2-beta-2-ships-with-abilities-api-updates-server-side-dataviews-fields-and-actions

• View post

  A private Slack channel, 24 hours' notice, and strict information-sharing rules. How the WordPress project coordinated industry-wide defenses before going public with two vulnerabilities. 🔗 https://www.therepository.email/wordpress-7-0-2-patches-rare-pre-authentication-rce-as-hosts-cdns-get-24-hour-head-start

• View post

  The WCUS 2026 schedule is now live, with AI dominating the program as organizers look to attract attendees with a beginner track and a small business marketplace in Phoenix next month. 🔗 https://www.therepository.email/wordcamp-us-2026-publishes-schedule-with-expanded-ai-programming-and-new-beginner-track

• View post

  The full exploit chain abuses six internal WordPress mechanisms to go from anonymous visitor to admin in two HTTP requests. 🔗 https://www.therepository.email/security-researcher-used-openais-sol-ultra-to-find-wordpresss-worst-vulnerability-in-years

• View post

  Four years after WordPress .org pulled the active install growth data for plugins, Matt Mullenweg has responded with a new reason for not bringing them back. 🔗 https://www.therepository.email/matt-mullenweg-responds-to-active-install-growth-data-ticket-for-first-time-in-four-years-cites-competing-interests

• View post

  Playground has supported persistent sites since March, but users keep telling the team they don't know that. A new dock-based UI aims to fix the discoverability problem. 🔗 https://www.therepository.email/wordpress-playground-team-calls-for-testers-as-new-dock-based-ui-aims-to-fix-feature-discoverability

• View post

  Unicode email address support was merged into core six weeks ago after 11 years of development. It's been pulled from 7.1 and will move to a community plugin. 🔗 https://www.therepository.email/wordpress-7-1-beta-3-now-available-punts-unicode-email-support-over-security-concerns

• View post

  New name, same mission. The WP Open Community Collective says it has rebranded to better reflect its intent to support open source contributors beyond WordPress. 🔗 https://www.therepository.email/the-wp-community-collective-rebrands-as-the-wpocc-after-wordpress-foundation-files-trademark-application-for-wpcc

• View post

  Out now: The Repository #312 🗞️ 🛡️ WordPress 7.0.2 patches critical pre-auth RCE found with OpenAI's Sol Ultra 🧪 WordPress 7.1 Beta 3 now available, punts Unicode email support 📊 Matt Mullenweg responds to active install growth data ticket for first time in 4 years 🔗 https://www.therepository.email/312

• View post

  After their proposed class action was dismissed in December, two agency owners have survived a second motion to dismiss thanks to the WordPress Engine Tracker website. 🔗 https://www.therepository.email/class-action-against-automattic-to-proceed-after-judge-finds-company-tracked-wp-engine-customers

• View post

  WP Engine claims sworn declarations and deposition testimony contradict months of assurances that Matt Mullenweg's WhatsApp, Signal, and Telegram messages had been preserved. 🔗 https://www.therepository.email/wp-engine-accuses-automattic-of-destroying-evidence-asks-court-to-dismiss-trademark-counterclaims

• View post

  WP Engine's second vertical platform launch this year targets mid-market merchants doing millions in revenue who've outgrown their existing commerce stack. 🔗 https://www.therepository.email/wp-engine-partners-with-bigcommerce-parent-commerce-to-launch-ecommerce-platform-for-high-growth-merchants

• View post

  WordPress 7.1 Beta 4 gives sites a way to turn off responsive style editing, and drops the inherited styles display after contributors couldn't agree on a design approach. 🔗 https://www.therepository.email/wordpress-7-1-beta-4-adds-opt-out-for-responsive-styling-punts-inherited-styles-display

• View post

  A US college wants to join Credits but needs its students writing code. It's prompted the program to build its first pathway shaped around a field of study. 🔗 https://www.therepository.email/wordpress-credits-calls-for-help-designing-a-developer-track-ahead-of-a-us-college-pilot