Community
Automattic Applies for a .php Top-Level Domain
WordPress parent Automattic filed for a .php TLD in ICANN's 2026 round. Here's how the application works.
Eric L. Barnes
WordPress
Every story tagged #wordpress.
WordPress from the PHP side. Core releases, developer APIs, and the security advisories worth acting on.
Applications
WordPress 7.1 Adds Playlist and Tabs Blocks and Inline Notes
WordPress 7.1 adds responsive block styles, inline Notes, browser-based media processing, a persistent toolbar, and new developer APIs.
Eric L. Barnes
Applications
XSS2Shell: WordPress Pre-Auth RCE Starts in strip_tags()
WordPress 7.0.3 patches CVE-2026-64638, a pre-auth XSS to RCE chain that begins with a parser disagreement between PHP's strip_tags() and KSES.
Eric L. Barnes
Applications
WordPress 7.1 RC1: Test Your Plugins Before August 19
WordPress 7.1 RC1 landed with 145 fixes since Beta 4, a new Icons API, and shareable revisions. Here's how to test your plugins before the final release.
Eric L. Barnes