Hello!
This week on The WP Week Newsletter, we cover the new /random/ endpoint coming in WordPress 7.2 and the community debate on it, the data breach at DreamHost, multiple survey results, along with new projects and more.
Submissions are now open for Black Friday 2026! Share your deals on plugins, themes, hosting, WooCommerce tools, SaaS, and more.
Don’t forget to subscribe and listen to the podcast version of this newsletter, where you can hear more details and discussions about these topics and more.
See you next week!
Team WP-CONTENT.CO
🙌 This weekly newsletter is kindly sponsored by ProfilePress, HireZoot and AccessMate
🗣️TALK OF THE TOWN

The feature redirects visitors to randomly selected published posts, with support for category, author, taxonomy, and custom post type archives. Site owners can control which post types are eligible, customize the selection through existing query hooks, or disable random redirects entirely.
The announcement has drawn largely negative feedback from the community. Joost de Valk, Olli Kousa, and Daniel Iser raised concerns about unintended exposure of content, while Ryan McCue and Rene Hermenau highlighted potential performance issues with the ORDER BY RAND() query, including increased server load on large sites.
📰 WORDPRESS & AROUND
All the updates around WordPress and its closely related technologies
The attack began in August, allowing hackers to steal customer emails, files, credentials, and session tokens by exploiting an undisclosed file manager vulnerability. The breach affected well under 10% of its customers and was disclosed following a multi-day outage and customer password resets.
- WordPress 7.2 will replace Dashicons with inline SVGs in the admin bar and menu: The change introduces a new API for using registered SVG icons in admin menus, post types, and admin bar nodes.
- Matt Mullenweg calls for stricter WordPress registration and email safeguards: Following a report about spammers using real email addresses during account registrations, Mullenweg highlighted gaps in WordPress username sanitization outside multisite installations.
- A new Badge Designer aims to simplify WordCamp badge creation: The proposed tool adds a visual editor to wp-admin for creating attendee badges with custom artwork, WordPress.org usernames, Gravatars, QR codes, and ticket information. It also generates print-ready PDFs with bleed and crop marks, eliminating the need for CSS, scripts, or third-party design software.
- WordPress Playground lets users clone live sites with Reprint: The feature copies a site’s files and database into an editable browser-based WordPress environment, allowing users to test design changes, plugin updates, and bug fixes without affecting their live site.
- What’s new in WordPress AI 1.5.0: The new version introduces six new experiments, including Text to Speech, Content Verification, MCP Access, WebMCP, Revision Change Summary, and Block Container Label Generation.
- WooCommerce 11.2.2 is now available: This is a security release that includes multiple hardening updates to the Store API, REST API authentication, checkout, payment data, and admin connection endpoints.
- Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026): There were 549 vulnerabilities disclosed in 351 plugins and 4 themes.
- Node.js prepares security updates for supported release lines on November 11: The 26.x, 24.x, and 22.x release lines will receive updates addressing high-severity security vulnerabilities. End-of-Life versions are also affected, and users are advised to upgrade to a supported version.
🔧 TIP OF THE WEEK
Don’t Use Global Selectors for Block JavaScript
❌ Avoid:
$(‘.testimonial-slider’).slick();
A block may appear 5 times.
Prefer:
document.querySelectorAll(‘.testimonial-block’).forEach((block) => {
initTestimonial(block);
});
Now each block controls its own instance.
Think:
Block JS should operate on the block instance, not the entire website.
💵 INVESTMENTS, ACQUISITIONS & PARTNERSHIPS
- Awesome Motive acquires Drip and Sleeknote: Drip is an email marketing and automation platform, and Sleeknote is a conversion optimization tool. Mogens Møller, CEO of Drip, and Patrick Moog, CTO of Sleeknote, will continue leading both businesses alongside their existing leadership team.
👥 COMMUNITY NEWS
Updates and News from the WordPress Community
The survey conducted by Commercegurus saw 107 respondents and found that 77% cited site speed as a WooCommerce challenge, followed by plugin bloat at 58%. The findings also show that 75% use Elementor, 60% expect to use WooCommerce more in the next year, and 68% identified checkout enhancements as a product priority.
- ACF 2026 Annual Survey: The survey received 1,339 responses, around 40% more than last year. The results show that 75% of respondents are developers, freelancers now nearly match agency workers, and 76.76% work in teams of three developers or fewer. AI adoption has also grown, with 91% using at least one AI tool.
- WooCommerce Checkout Study 2026: In a test of 201 live WooCommerce stores ahead of Black Friday, NorthDuty found that 12 (6%) could not complete a guest checkout, despite their homepages loading normally. The most common issue was the absence of available payment methods, which prevented customers from completing their purchases.
- Marcus Burnette says building products isn’t enough to attract customers: After developing five tools over the past couple of months and promoting them across social media, Burnette says adoption has been slow and asks what it takes to get products into the hands of real customers.
- Jamie Marsland asks AI builders how they are using Grok bots: He says he has started experimenting with Grok bots for WordPress.com and now has eight running, each handling different tasks, including trend research, YouTube Shorts, and content ideation. He is inviting others to share how many bots they have and what they use them for.
- Wes Bos migrates his WordPress site to Emdash: The migration moved 307 posts, 6.7GB of photos, four custom content types, five page templates, and 15 custom fields, along with several plugins. Bos says Emdash skills handled the migration, preserved the frontend design, and improved the page speed score from 52 to 75.
- Astro sites outperform WordPress in Core Web Vitals pass rates: Brad Williams points out that 71% of Astro sites pass Core Web Vitals compared with 48% of WordPress sites. However, the same dataset shows approximately 1.3 million WordPress sites passing the assessment, 26 times the total number of Astro sites.
- WPManageNinja surpasses 1.8 million users as October brings 24 product updates: The company also published 100 blogs, 22+ videos, and 200+ social media resources during the month.
- WordPress Studio introduces an AI-powered workspace for building websites: The redesigned app brings AI-assisted site creation, live previews, multiple AI models, design customization, and publishing tools into one workspace, while adding support for external agents such as Claude Code, Codex, and Cursor through MCP.
- Nexcess brings Kadence, Give, LearnDash, and The Events Calendar into one software package: The new Nexcess plugin stack will include all four products and their premium features under a single annual subscription, with pricing based on the number of sites.
- The OptinMonster MCP is here: It allows users to connect Claude, ChatGPT, and Cursor to users’ accounts, allowing them to create and edit campaigns, configure targeting rules, review analytics, and manage campaigns using natural language.
- Melapress Login Security adds alerts for simultaneous WordPress sessions: The update sends users email notifications when their accounts have simultaneous sessions and lets them terminate all other sessions. The feature is designed to help users identify potential session hijacking and regain control of their accounts.
- Zero Wire by Cloudflare, a hub for investigating critical Internet vulnerabilities: A public vulnerability intelligence feed on Cloudflare Radar that provides plain-language briefings on critical vulnerabilities, affected systems, exploitation evidence, and recommended remediation steps.
🚀 NEW PROJECTS
| “The easiest and most productive way to check a website’s accessibility is through the browser. I tried more than 20 accessibility add-ons, and while they all work well, I felt there was room for something simpler, friendlier, and faster. That’s what we set out to build with AccessMate: an accessibility add-on that people would actually love to use“ Aravind Ajith about creating Accessmate. |
- AccessMate Accessibility Checker add-on for Mozilla: With this, users can scan web pages for accessibility issues against WCAG 2.2 AA standards. It identifies problems such as missing image descriptions, unlabelled controls, poor colour contrast and heading structure issues, while offering screen reader inspections, vision simulations and suggestions for fixes. All checks run locally in the browser, with no account or sign-up required.
- WordPress for Writers: A plugin by Andrei Draganescu that replaces wp-admin with a calm, three-pane writing app inspired by Bear.
- AgentedSEO: Developed by Joy Chetry this is a new SEO plugin with built-in MCP support that lets AI agents such as Claude, Cursor, and Codex handle SEO tasks, including writing metadata, generating schema, creating drafts, and managing redirects.
- StaleWP – A new project by Abhishek Deshpande and Nikita Sawarkar that tracks the WordPress plugin directory and tells you which plugins have gone quiet, which are falling behind, and what to do about them.
- Runlight: Developed by Jon C. Phillips this is a free, open-source analytics tool that lets website owners track traffic, visitor activity, conversions, and referral sources directly within their own applications. It stores analytics data in the website’s own database, and requires no cookies.
🔖 INTERESTING READS & PODCASTS
More posts and podcasts from the WordPress Community you don’t want to miss
- Steve Mosby joins Bud Kraus on Seriously, Bud? to discuss his personal life, career journey from NHS finance to WordPress-based accounting software, and his involvement in the WordPress community.
- On The Melapress Show, Robert Abela speaks with MailChannels founder and CEO Ken Simpson about common WordPress email delivery issues, the role of sender reputation and email authentication, and ways to troubleshoot missing emails and improve deliverability.
- Adam W. Warner recently migrated a WordPress website from Nexcess to a new hosting provider, only to discover that several Nexcess-specific files and integrations remained on the server.
- Dave Foy explains how he built his new website without WordPress or a page builder, using Astro, Claude Code, Git, and Cloudflare.
- Anne McCarthy explores how upcoming WordPress features, including Notes enhancements, Suggestion Mode, and the Presence API, could improve collaboration and introduce safeguards against accidental publishing.
- WP Engine has introduced new traffic management measures to prevent automated bots from exhausting PHP worker capacity and causing 500 errors. The changes reserve at least 20% of available PHP workers for human visitors.
- Miriam Schwab explains how the growing use of AI agents is changing the way websites are accessed and why sites need to become “agent ready.”
- Brad Vincent describes how his AI coding agent, Bender, spent 18 days and more than 1.74 billion tokens working on a single plugin feature without delivering a working solution.
- WordCamp Sylhet 2026 brought the WordPress community together in Bangladesh for a two-day event focused on knowledge-sharing, contributions, and community connections, with organizers and sponsors choosing to go swag-free.
🛠 GUIDE ZONE – HOWTO’S and MORE
Handpicked fresh guides from WordPress circle
- How to build a new site with GeneratePress AI, step by step: From GeneratePress
- 40 WordPress sites to Astro: From Michal Barus
- The free design file to WordPress skill and setup guide: From Markzware
- Why most WordPress syntax highlighting plugins replace the code block (and why that’s a problem): From WebberZone
📆 SAVE THE DATES
Do not miss a WordPress event ever again
- CloudFest Americas on Nov 11-12, 2026: The tickets are now available and the full agenda has been published.
- CMS Conf 2026 on 12-14 November: The tickets are now available. The agenda has been published.
- WordCamp Bengaluru 2026 on Nov 21-22: The call for sponsors is now open, and this year’s theme is WordPress and AI. The tickets are now available.
- Enqueue 2026 on Dec 09: The early bird tickets are now available.
- WordCamp Athens 2026 on 11-12 December: The call for sponsors, and speakers is now open.
- WordCamp Delhi 2026 on 12-13 Dec: The call for sponsors is now open, and the Conference Day Tentative Schedule is now available.
- WordCamp Nepal 2027 on Jan 29-30: The call for media partners is now open, and the call for guides for the WP Kurakani Corner is also now open.
- WordCamp Mumbai 2027 on 13 February: The call for sponsors and speakers is now open.
- WordCamp Switzerland 2027 on 5-6 March: The call for sponsors is now open. Tickets are now available.
- WordCamp Asia 2027 on April 9 – 11: The call for sponsors, volunteers and speakers is now open. The tickets are now available application is also now open.
- Checkout Summit 2027 on 28 April – 1 May: The early bird tickets are now available.
- WordCamp Europe 2027 on 27 – 29 May: The call for media partners and community creators is now open.
🎁 WORDPRESS DEALS OF THE WEEK
Again, these are the best deals of the week, handpicked by yours!
Running a Black Friday deal? Share it here.
EXCLUSIVE DEALS
- 4 Months free offer on hosting plans of WP Engine (Coupon Code- FREEDOMTOCREATE)
- 10% off on monthly & annual plans at SureTriggers (Coupon Code- WPCONTENT10)
- Up to 84% off at Hostinger (Code NYSALE for an extra 10% off)
- 15% off yearly plans at Videvo (Coupon Code – WPV15)
MORE DEALS
- NordVPN Special Offer – Get up to 75% off + 3 extra months on the 2-year plan
- Cloudways limited-time summer offer: 40% off on all hosting plans for 4 months plus unlimited free migrations.
- Up to 50% off on BookingPress plugin
- Up to 50% off on Paid Membership Pro plans.
- Up to $100 OFF Essential Blocks PRO plugin.
- 50% off 3 months on Liquid Web’s Bare Metal server hosting
- 20% off for Constellation plugin
- 28.65% off for the lifetime plan for the Modern Cart for WooCommerce plugin.
- 33% off for the Uncanny Automator plugin.
This weekly newsletter is kindly sponsored by awesome WordPress Companies 🦸♂️🙌
Last but not least, updates from WP-CONTENT.CO 👇
Awesome Motive has acquired Drip, an email marketing and automation platform, and Sleeknote, a conversion optimization tool. Mogens…
A new design exploration for Feature Notifications proposes a centralized notification panel accessible through a bell icon across…
WP Engine is also seeking summary judgment on all counterclaims brought against it by Automattic in the ongoing…
The WordPress AI Team has outlined plans to make WordPress natively compatible with AI agents, allowing users to…

Team WP-CONTENT.CO
This weekly newsletter is kindly sponsored by ProfilePress, HireZoot and AccessMate
Built with Newsletter Glue.








