DEV Community

Courtney Robertson
Courtney Robertson

Posted on • Originally published at courtneyr.dev on

This Week in WordPress 347: Evan

This Week in WordPress #347

🎙 Tech Troubles & WordPress Wins — My Take on “This Week in WordPress” #347

The episode opened with classic live-show gremlins—glitchy audio, misbehaving embeds, and post-WordCamp brain fog. The chaos set an oddly perfect tone: WordPress work is messy in real life, yet progress continues to happen. The links below point to the original sources Nathan gathered for the show, so you can jump straight to the good stuff.


🔒 Security pulse

Security stories landed fast and practical this week. Melapress published its 2025 survey, a crowdsourced snapshot of what WordPress pros actually worry about. An interesting tension emerged: uptime often takes priority over compliance on lists, even as regulations ramp up. Worth a skim if client conversations keep drifting to “just keep the site up.” (Patchstack)

Patchstack flagged a critical SQL injection that’s already patched in the Paid Membership Subscriptions plugin. If the plugin resides in a stack, update it before finishing this paragraph.

For a broad overview, SolidWP’s weekly report compiles plugin and theme vulnerabilities, providing the usual “is this in my stack?” triage value. (WP Builds)

Beyond WordPress, Cloudflare detailed how an attacker used a Salesloft/Drift → Salesforce integration path to access data. The write-up serves as a sober reminder that vendor chains can create a significant blast radius. Audit who gets access to what, not just what runs on a server. (The Delta)


🧰 Tools & tinkering

Alex Kirk shipped a handy update to the Playground Step Library : it’s now consumable as an npm package and has a friendlier UI for crafting blueprints. Spinning up shareable, pre-configured WordPress sandboxes just got easier for demos, training, and support. (Alex Kirk)

Publishing pipeline pro-tip: the official Google Docs → WordPress.com/Jetpack add-on still exists, quietly saving teams who draft in Docs and publish on WordPress. If collaboration happens in Docs today, this is “less yak-shaving, more shipping.” (WP Builds)

Two bite-size block/dev nuggets:

  • block.json primer for plugin authors who want cleaner block registration and better runtime behavior. Tight, technical, functional. (WP Builds)
  • BlaBlaBlocks Tabs adds accessible tabs to the editor with templates. Suitable for content teams that insist on “less scroll, more structure.” (WP Builds)

And a pair of utility updates:

  • WooCommerce 10.2 pre-release is ready for testing (product collection carousel, faster Cart block, better onboarding). Staging sites love this kind of week. (WP Builds)
  • DB Reset Pro offers one-click database resets while preserving uploads—useful for demo sites, but strictly for folks who respect backups. (WP Builds)

🌐 AI & the wider web

For context-seekers, the Financial Times explainer on transformers remains a crisp on-ramp for understanding why modern AI feels different. Pair that with Simon Willison’s running list of “vibe-coded” AI-assisted tools if experimental dev workflows spark joy. (WP Builds)

Publishers vs. crawlers continues to simmer. This op-ed walks through Cloudflare’s proposal to change the economics of AI scraping—food for thought for anyone whose content now fuels chat answers more than search clicks. (WP Builds)


🧑‍🦯 Accessibility & community

Joe Dolson shipped WP Accessibility 2.2.0 with notable changes, and the WP Accessibility Docs project posted an August update—a good pulse check for teams improving baseline a11y instead of bolting it on at the end. (WP Builds)

The Accessibility Team also introduced new team representatives, with clear expectations about their roles. Community health beats shiny features in the long term; leadership clarity helps contributors pick a lane. (Make WordPress)


🌍 Multilingual & content ops

WPML 4.8 leans into AI translation with a “better than human” claim and a credit-based model. Whether that line lands or not, translation quality continues to improve, and teams with big content catalogs finally have options beyond “someday.” (WP Builds)


🗓 Events & extras

LoopConf (London, Sept 25) brings a focused, dev-heavy lineup. If a trip is on the calendar, WPLDN (the evening before) is an easy add-on for hallway-track energy. (WP Builds)

Two bonus links from the “not WordPress, still delightful” shelf:

  • Web Day Out (Brighton, Mar 12, 2026): a one-day love letter to what browsers can do today. Front-end folks, this scratches the right itch. (WP Builds)
  • Mitch Ivin’s Windows XP portfolio : pixel-perfect nostalgia as a portfolio site. Pure craft, pure fun. (WP Builds)

The post This Week in WordPress 347: Evan appeared first on Courtney Robertson.

Top comments (0)