Hello!

WordPress 6.5.1 was skipped due to an error with the initial package and WordPress 6.5.2 is the first minor release for WordPress 6.5. It was released last week and patches an XSS vulnerability. Also, Automattic has acquired Beeper, a universal messaging app.

Don’t forget to subscribe and listen to the podcast version of this newsletter on Amazon Music, Apple Podcasts, Spotify, and Google Podcasts, where you can hear more details and discussions about these topics and more.

See you next week!

Team WP-CONTENT.CO

Community Sponsor

Omnisend

Boost your sales with email & SMS—without breaking the bank
Check it out  →

WP Job Openings – Easy-peasy Recruitment Plugin.
Create a career page and start recruiting talents in a few minutes
Check it out  →

---

📰 WORDPRESS & AROUND

All the updates around WordPress and its closely related technologies

WordPress 6.5.2 maintenance and security release

This security and maintenance release features 2 bug fixes on Core, 12 bug fixes for the Block Editor, and 1 security fix that patches an XSS vulnerability. WordPress 6.5.2 is the first minor release for WordPress 6.5 as WordPress 6.5.1 was not released due to an error with the initial package. Both the Core and Systems teams are implementing measures to prevent such occurrences in the future.

• WordPress 6.5.3: An upcoming maintenance release: WordPress 6.5.3 is scheduled for release on 7 May 2024.
• What’s new in Gutenberg 18.1: The latest release brings background image support to the site editor, improved data views, and more.
• WordPress 6.5 release retrospective: The post is an open call inviting everyone who contributed to reflect and share their thoughts on the release process to learn, iterate, and improve for future releases.
• Speculative loading in WordPress: An overview of the Speculative Loading plugin and how its functionality is powered by the Speculation Rules API, a new web API that allows defining rules for which kinds of URLs to prefetch or pretender.
• The Forums get a refresh: The WordPress Forums also received a revamp and this comes days after the WordPress.org homepage was updated.
• The new grid experience, feedback needed: The Design team is looking for feedback in regard to the new grid experience, specifically the manual mode which lets users set number of columns and rows.
• Google unplugs “Notes on Search” experiment: Google is shutting down its Google Notes Search Labs experiment that allowed users to see and leave notes on Google’s search results and many in the search community aren’t too surprised.

🚨 WEB SECURITY & VULNERABILITIES

A collection of web security and vulnerability news and updates for the past week

Privilege escalation and local file inclusion vulnerabilities patched in MasterStudy LMS WordPress plugin

The two vulnerabilities were recently patched and users are to update to the latest version immediately.

• Unauthenticated SQL injection vulnerability patched in Email Subscribers by Icegram Express WordPress plugin: An unauthenticated SQL injection vulnerability that can be leveraged to extract sensitive data from the database, such as password hashes was patched recently.
• WordPress vulnerability report — April 10, 2024: Weekly vulnerability report from SolidWP.
• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024): There were 173 vulnerabilities disclosed in 138 plugins and 2 themes.

🔌 NEW PLUGINS & THEMES

Be one of the first ones to explore some fresh plugins and themes

Avista theme

A minimal and modern FSE theme with a number of well-designed patterns suitable for creating stunning websites for agencies and businesses.

• LowFi theme: A simple blog theme with Lo-fi aesthetics.
• Common theme: A theme suitable for showcasing photos, articles, or collections of content.
• Gravity SMTP plugin: A new SMTP plugin.
• Speculative Loading plugin: This plugin enables browsers to speculatively prerender or prefetch pages when hovering over links.
• Pattern Wrangler plugin: The plugin allows users to hide core and remote patterns, rename and map categories, and more.

💵 INVESTMENTS, ACQUISITIONS & PARTNERSHIPS

• Automattic acquires Beeper: Automattic has acquired Beeper, a universal messaging app that combines 14 different chat networks in one inbox.

👥 COMMUNITY NEWS

Updates and News from the WordPress Community

The 2024 WordPress Professional Survey has been published

 The survey saw the participation of 1,144 freelancers and agency owners with an average of 11 years of experience, 73% of whom run their business full time with an average team size of 2 from the USA (475), UK (134), Australia (83), Canada (82) and beyond.

• All new Deblank Colors: Aaron Rutley on X announced the launch of Deblank Colors, an AI-powered color palette generator. With this users can generate personalized color palettes by entering prompts.
• ZipWP has launched a custom website builder: This powerful feature lets you design custom websites and wireframes. Then, with just one click, ZipWP can generate a complete website based on your design.
• Identifying WordPressers on GitHub: Pascal Birchler with the help of an API created a browser extension that retrieves someone’s WordPress.org username based on their GitHub username. The extension displays a WordPress logo next to a GitHub username if the person has a username on WordPress.org.
• Automattic handled more than 1 billion requests for NASA: Matt Mullenweg posted on X how Automattic was able to handle 1 billion requests for NASA in a 4.5 hour span during the solar eclipse event.
• Jono Alderson has won the Digital Superstar Award: Jono Alderson is the recipient of the 2024 inOrbit Digital Superstar.

🔖 INTERESTING READS & PODCASTS

More blog posts and podcasts from WordPress Community you don’t want to miss

• Beeper & Texts: Matt Mullenweg
• Contributor spotlight: Cynthia Norman: From WordPress.org
• Misogyny in tech is still real: From Post Status
• Plugins: Stealing the butt (vulgar): From Half-Elf on Tech
• What is an SQL injection (SQLi)? How to prevent SQLi attacks: From WPScan
• How to stop WooCommerce emails going to spam in 6 easy steps: From Melapress
• What are the next steps in WordPress security?: From WebTNG
• Cooking Websites: My favorite web design tools: From WPBakery
• 5 AI writing tools you should know about: From WPBakery
• Jamie Marsland on turning technical know-how into popular content: From WP Tavern Jukebox
• 7 ways to use generative AI in PPC: From Search Engine Land
• Are websites getting faster? New data reveals mixed results: From Search Engine Journal

🛠 GUIDE ZONE – HOWTO’S and MORE

Handpicked fresh guides from WordPress circle

• A first look at the Interactivity API: From WordPress Developer Blog
• Styling your site with global styles: From WordPress TV
• An easy guide to compress images with CLI to improve loading speed: From Deluxe Blog Tips
• From beginner to pro: Leveraging the WordPress Playground’s versatile API suite: From Delicious Brains
• A step-by-step guide to building a landing page with WPBakery Page Builder: From WPBakery
• A comprehensive guide to organizing your WordPress media: From Admin Columns
• How to install PHP dependencies and extensions with Docker: From Kinsta

📆 SAVE THE DATES

Do not miss a WordPress event ever again

• WordCamp Leipzig on April 20, 2024: The tickets are now available.
• WordCamp Bilbao on April 20-21, 2024: The tickets are now available.
• WordCamp Buffalo, NY USA on May 4-5, 2024: The call for speakers and sponsors is now open.
• WordCamp Sylhet, Bangladesh on May 10-11, 2024: The call for sponsors is now open.
• Networking at WordCamps on May 13, 2024: This event by Support Inclusion in Tech will help you make the most of your WordCamp experience. Ticket sales go to 1 local SiNC speaker applicant.
• WordCamp Europe on 13-15 June 2024: The call for speakers, volunteers and sponsors is live. The call for photographers is now open.
• Uganda Website Projects Competition 2024 on July 5th, 2024: Organized under the theme, “Problem Solving With WordPress”, it is a dynamic next-gen event that brings together high school and university students. The call for sponsors and projects is now live.
• WordCamp Canada on July 11-13, 2024: The call for speakers, volunteers, and sponsors is now open.
• WordCamp US on 17-20 September 2024: The tickets are now available.
• WordCamp Asia on February 2025: The event is in the early planning stages and the call for organizers is now open.

🎁 WORDPRESS DEALS OF THE WEEK

Just the best deals of the week, again, handpicked by yours truly!

EXCLUSIVE DEALS

• 4 Months free offer on hosting plans of WP Engine (Coupon Code- FREEDOMTOCREATE)
• 15% off yearly plans at Videvo (Coupon Code – WPV15)

OTHER DEALS

• 40% off for 4 months on all hosting plans + 40 free migrations at Cloudways  (Coupon Code – BFCM4040)
• 53% off for NordLocker
• Up to 50% off on EchoRewards PRO.
• Up to 75% off on plugins, themes and hosting at WP Hive
• 50% off on the Thrive Suite yearly plan.
• 50% off Web Hosting Packages at StableHost (Coupon Code – 50OFFYEAR1)
• 80% off for plugins at WPPool
• Up to 77% off hosting plans at HostPapa
• 50% off for Advanced Giftcards for WooCommerce plugin
• Upto 55% off hosting plans at Nexcess
• 86% off at AtlasVPN
• 20% off for Fluent Forms plugin
• 50% off at Formidable Forms
• 20% off for FluentCRM plugin
• 50% off for WP Social Ninja plugin 
• Upto 95% off for PitchGround products 
• Upto 75% off WordPress Hosting plans at InMotion Hosting
• 83% off hosting plans at SiteGround
• 60% off at Hostgator India (Coupon Code- SUNSHINE)
• Up to 74% off at Liquid Web
• 52% off on Managed Dedicated Server Hosting at Liquid Web

Latest from WP-CONTENT.CO

---

Team WP-CONTENT.CO

Built with Newsletter Glue.