# WordPress Published articles for WordPress. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Automattic CEO Matt Mullenweg returned after 33 hours of leave without a public explanation DevFeed: [Automattic CEO Matt Mullenweg returned after 33 hours of leave without a public explanation]() Original publisher: [Read original article]() Author: Adrian Bridgwater Published: 2026-09-16T20:39:42Z Content type: news Language: en Sources: [The New Stack]() Topics: [WordPress](), [App](), [Open Source](), [Tumblr]() Tags: [cloud-services](), [company](), [cto](), [developer-tools](), [governance](), [matt-mullenweg](), [open-source](), [wordpress]() ### AI overview Automattic CEO Matt Mullenweg was placed on leave and reinstated about 33 hours later. The company has not publicly explained what prompted the leave or return, while observers have raised--but not established--the possibility of an attempted change in control. ### Source excerpt There were unusual goings-on this month at Automattic, a company known for its free and open-source app for building WordPress The post Automattic says CEO Mullenweg was gone and back inside 33 hours. What happened between? appeared first on The New Stack. ## WordPress Proposes Ipsum as a Minimal Default Theme for WordPress 7.2 DevFeed: [WordPress Proposes Ipsum as a Minimal Default Theme for WordPress 7.2]() Original publisher: [Read original article]() Author: Alex Harper Published: 2026-09-16T16:51:36Z Content type: news Language: en Sources: [Web Designer Depot]() Topics: [WordPress](), [WordPress themes and plugins](), [Website]() Tags: [accessibility](), [block-themes](), [cms](), [default-themes](), [full-site-editing](), [gutenberg](), [gutenberg-editor](), [ipsum](), [matt-mullenweg](), [news](), [news-web-development](), [release](), [twenty-twenty-seven](), [ux-design](), [wcag](), [web-design](), [web-development](), [website-design](), [wordpress](), [wordpress-7-2](), [wordpress-design](), [wordpress-themes]() ### AI overview WordPress has proposed Ipsum as the default theme for WordPress 7.2, replacing the year-based Twenty Something naming convention. The deliberately minimal theme is designed as a customizable blogging canvas, while the more expressive Mētis theme will remain separate and will not ship with the release. ### Source excerpt After 16 years, WordPress just killed one of its most recognizable traditions. The predictable "Twenty Something" default themes are history, and their replacement, Ipsum, signals a surprisingly different vision for what WordPress thinks a modern website should start with. ## Yestalgia: Bringing Decathlon's '90s Spirit to Life Through a Playful Digital Experience DevFeed: [Yestalgia: Bringing Decathlon's '90s Spirit to Life Through a Playful Digital Experience]() Original publisher: [Read original article]() Author: Quentin Hocdé and Jonathan Da Costa Published: 2026-09-12T08:40:31Z Content type: article Language: en Sources: [Codrops]() Topics: [micro-interactions for websites]() Tags: [90s-inspired-design](), [90s-web-design](), [animation](), [articles](), [case-study](), [creative-development](), [creative-technology](), [creative-web-design](), [decathlon-digital-experience](), [decathlon-website](), [decathlon-yestalgia](), [design](), [development](), [editorial-web-design](), [experimental-web-design](), [fashion-web-design](), [gsap](), [gsap-animation](), [illustration](), [immersive-web-experience](), [interactive-storytelling](), [interactive-website](), [lenis-smooth-scroll](), [motion-design](), [nostalgic-web-design](), [performance](), [piecesjs](), [product](), [product-focused-design](), [product-launch](), [rive](), [rive-animation](), [typography](), [walkman-navigation](), [web](), [web-animation](), [wordpress](), [wordpress-custom-theme](), [yestalgia]() ### AI overview This article presents Yestalgia, Decathlon's '90s-inspired capsule collection website. It explains how editorial product presentation, vibrant illustration, expressive typography, animation, micro-interactions, and a cassette-player navigation concept turn the campaign's nostalgic art direction into a playful digital experience. ### Source excerpt A closer look at how Yestalgia brings Decathlon's '90s-inspired vision to the web through art direction, interaction, animation, and creative development. ## Canva Is Quietly Publishing Nearly 1 Million Websites a Month DevFeed: [Canva Is Quietly Publishing Nearly 1 Million Websites a Month]() Original publisher: [Read original article]() Author: Alex Harper Published: 2026-09-08T12:02:00Z Content type: article Language: en Sources: [Web Designer Depot]() Topics: [Web](), [Search engine optimization (SEO)](), [Code](), [webflow](), [WordPress]() Tags: [ai-tools](), [ai-web-design](), [canva](), [canva-code](), [canva-websites](), [code](), [design-automation](), [design-tools](), [framer](), [no-code](), [no-code-website-builders](), [responsive-design](), [seo](), [updates](), [ux-design](), [visual-suite](), [visual-ui-design](), [web](), [web-design](), [web-designers](), [web-development](), [webflow](), [website-builders](), [website-design](), [wordpress]() ### AI overview Canva is becoming a significant website platform, publishing nearly one million new websites monthly and more than 89 million since 2022. New capabilities include navigation, SEO controls, responsive layouts, custom domains, analytics, password protection, and Canva Code for creating interactive elements from prompts. The article argues that Canva's main impact on web designers will come from making simple websites exceptionally convenient to create. ### Source excerpt Canva isn't just for presentations and social posts anymore. Nearly 1 million websites are now being published through Canva every month--and with 100+ new Visual Suite updates, web designers may want to start paying attention. ## Security Week 2637: взлом Dropbox через Lenovo ID DevFeed: [Security Week 2637: взлом Dropbox через Lenovo ID]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-09-07T20:01:45Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [Security](), [dropbox](), [Google Chrome](), [V8](), [OpenAI](), [WordPress](), [migration]() Tags: [chrome](), [dropbox](), [google-chrome](), [id](), [lenovo](), [news](), [openai](), [security](), [sql](), [tag-9fe8963de219](), [v8](), [wordpress]() ### AI overview A weekly security roundup reports that several thousand Dropbox accounts were compromised through flawed Lenovo ID authorization. It also covers ValleyRAT spyware, a Google Chrome V8 vulnerability, OpenAI agents making changes outside a test environment, Plex updates, and a WordPress plugin SQL injection. ### Source excerpt Как стало известно на прошлой неделе, несколько тысяч учетных записей в сервисе Dropbox были взломаны в период с 4 по 21 августа. Взлом стал возможен из-за некорректной авторизации при использовании стороннего идентификатора Lenovo ID. Как выяснилось позднее, ошибка на стороне Lenovo позволяла зарегистрировать учетную запись на произвольный почтовый адрес, а потом использовать ее для доступа к учетке с тем же электронным адресом в Dropbox. Dropbox отреагировала на инцидент, принудительно разлогинив всех пользователей, использовавших Lenovo ID в качестве метода авторизации. Также было добавлено обязательное требование ввода пароля непосредственно для учетной записи Dropbox. Читать далее ## Can You Really Replicate Your Favorite SaaS With AI? DevFeed: [Can You Really Replicate Your Favorite SaaS With AI?]() Original publisher: [Read original article]() Author: Eric Karkovack Published: 2026-09-02T18:29:49Z Content type: article Language: en Sources: [Speckyboy Design Magazine]() Topics: [Artificial Intelligence](), [Software as a service](), [coding]() Tags: [ai](), [artificial-intelligence-ai](), [crm](), [learn-web-development](), [saas](), [wordpress](), [wordpress-ai](), [wordpress-developer]() ### AI overview The article examines using AI to recreate a SaaS product, arguing that generated code can help but does not remove the challenges of scope, integrations, data ownership, and maintenance. ### Source excerpt AI makes it easier to recreate parts of SaaS apps, but building a useful tool takes more than generated code. This article covers scope, integrations, data ownership, and maintenance. The post Can You Really Replicate Your Favorite SaaS With AI? appeared first on Speckyboy Design Magazine. ## The Best WordPress Hosting in 2026 DevFeed: [The Best WordPress Hosting in 2026]() Original publisher: [Read original article]() Author: Paul Andrew Published: 2026-08-26T09:25:27Z Content type: comparison Language: en Sources: [Speckyboy Design Magazine]() Topics: [WordPress](), [WordPress Hosting](), [hosting](), [Caching](), [Security](), [dev-tools](), [ssh](), [SSL]() Tags: [caching](), [comparison](), [developer-tools](), [hosting](), [performance](), [pricing](), [security](), [ssh](), [ssl](), [support](), [tools](), [web-hosting](), [wordpress](), [wordpress-hosting]() ### AI overview A comparison of six WordPress hosting providers--WordPress.com, Bluehost, Pressable, Cloudways, Kinsta, and SiteGround--covering performance, traffic handling, uptime, pricing, support, management, security, backups, staging, caching, CDN access, and developer tools. It explains that different site types have different hosting needs and provides recommendations for common WordPress projects. ### Source excerpt Compare the best WordPress hosting providers for 2026, including pricing, performance, tools, support, and options for different types of sites. The post The Best WordPress Hosting in 2026 appeared first on Speckyboy Design Magazine. ## 6 Best WordPress Plugins for Improving Website Accessibility in 2026 DevFeed: [6 Best WordPress Plugins for Improving Website Accessibility in 2026]() Original publisher: [Read original article]() Author: Eric Karkovack Published: 2026-08-25T17:09:45Z Content type: article Language: en Sources: [Speckyboy Design Magazine]() Topics: [Accessibility](), [WordPress themes and plugins](), [WordPress](), [alt text](), [Artificial Intelligence]() Tags: [accessibility](), [ai](), [alt-text](), [best-practices](), [content](), [features](), [images](), [learn](), [media](), [post](), [tools](), [web-accessibility](), [wordpress](), [wordpress-plugins]() ### AI overview A guide to six WordPress plugins that can help identify and improve website accessibility issues, including missing attributes, skip links, labels, contrast, and image descriptions. The article notes that automated results require manual verification. ### Source excerpt We have a fantastic collection of WordPress plugins and tools to help you overcome the challenges that come along with website accessibility. The post 6 Best WordPress Plugins for Improving Website Accessibility in 2026 appeared first on Speckyboy Design Magazine. ## MicroLighter: Syntax Highlighter DevFeed: [MicroLighter: Syntax Highlighter]() Original publisher: [Read original article]() Author: Geoff Graham Published: 2026-08-25T14:10:34Z Content type: article Language: en Sources: [CSS-Tricks]() Topics: [Syntax Highlighting](), [CSS](), [JavaScript](), [WordPress](), [Code]() Tags: [code](), [css](), [custom-highlight-api](), [javascript](), [links](), [resource](), [web](), [wordpress]() ### AI overview MicroLighter is a CSS-focused syntax highlighter for code blocks that uses Custom Highlights and aims to provide themes, line numbers, multiple-language support, semantic markup, and modular features with less JavaScript and fewer dependencies. The article also reports a substantially smaller bundle than Prism after integrating it into a WordPress site. ### Source excerpt Syntax highlighting for code blocks without the complicated markup, spans, classes, and bloated JavaScript, courtesy of Uncle Dave. MicroLighter: Syntax Highlighter originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well. ## How to Work With Your Client's Next (Or Previous) Developer DevFeed: [How to Work With Your Client's Next (Or Previous) Developer]() Original publisher: [Read original article]() Author: Eric Karkovack Published: 2026-08-25T11:20:05Z Content type: article Language: en Sources: [Speckyboy Design Magazine]() Topics: [client](), [Processes]() Tags: [developer](), [developers](), [freelance-business](), [freelance-career](), [freelance-design](), [how-to](), [payment](), [wordpress](), [wordpress-agency](), [work]() ### AI overview This article offers practical advice for managing website handoffs between a client's current and incoming developers. It recommends staying professional, documenting processes, responding promptly, avoiding conflict, and ensuring outstanding payments are settled before transferring site assets or access. ### Source excerpt Website handoffs between developers can get awkward. Learn how to stay professional, get paid before transferring assets, and share logins, licenses, and access without creating risk. The post How to Work With Your Client's Next (Or Previous) Developer appeared first on Speckyboy Design Magazine. ## WordPress PHP-Only Block Registration DevFeed: [WordPress PHP-Only Block Registration]() Original publisher: [Read original article]() Author: Fränk Klein Published: 2026-08-24T13:54:02Z Content type: tutorial Language: en Sources: [CSS-Tricks]() Topics: [Web Development]() Tags: [articles](), [javascript](), [php](), [rest-api](), [wordpress](), [wordpress-blocks]() ### AI overview WordPress 7.0 adds PHP-only block registration, generating the JavaScript registration, editor preview, and sidebar controls from PHP definitions. The article explains the approach and its limits, including reduced interaction within the block preview. ### Source excerpt Seven and half years after blocks arrived in Core, WordPress introduces a way to build blocks without React annd build pipelines. All you need is PHP. WordPress PHP-Only Block Registration originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well. ## Best WordPress Hosts for Designers & Creatives in 2026 DevFeed: [Best WordPress Hosts for Designers & Creatives in 2026]() Original publisher: [Read original article]() Author: Paul Andrew Published: 2026-08-22T11:45:43Z Content type: comparison Language: en Sources: [Speckyboy Design Magazine]() Topics: [WordPress](), [WordPress Hosting](), [hosting](), [cloud-infrastructure]() Tags: [animation](), [collaboration](), [cost](), [design](), [images](), [performance](), [storage](), [support](), [themes](), [web-design](), [web-hosting](), [wordpress](), [wordpress-hosting]() ### AI overview A comparison of WordPress hosting options for designers, photographers, illustrators, freelancers, studios, and creative agencies. It evaluates performance, media handling, storage, themes and plugins, staging, backups, collaboration, client management, support, and cost, with recommendations for different website and workflow needs. ### Source excerpt Compare the best WordPress hosts for designers and creatives, with options for portfolios, client websites, visual content, and agency work. The post Best WordPress Hosts for Designers & Creatives in 2026 appeared first on Speckyboy Design Magazine. ## Get rid of your CAPTCHA, the future of the web is bots DevFeed: [Get rid of your CAPTCHA, the future of the web is bots]() Original publisher: [Read original article]() Author: Phoebe Sajor Published: 2026-08-21T07:40:00Z Content type: article Language: en Sources: [Stack Overflow Blog]() Topics: [AI Bots]() Tags: [agentic-ai](), [agents](), [ai](), [ai-agents](), [bots](), [business](), [content](), [enterprise](), [models](), [platform](), [podcast](), [se-stackoverflow](), [se-tech](), [web](), [web-development](), [wordpress]() ### AI overview A conversation about how AI agents and bots could reshape web business models and why websites need structured content. ### Source excerpt Ryan chats with Brian Alvey, CTO at WordPress VIP, about how AI agents are changing the business models of the web, what parts of how we build our sites won't survive our current digital evolution, and why your site will always need structured content. ## WordPress.com Student Plan DevFeed: [WordPress.com Student Plan]() Original publisher: [Read original article]() Author: Geoff Graham Published: 2026-08-19T08:50:00Z Content type: opinion Language: en Sources: [CSS-Tricks]() Topics: [Web Development]() Tags: [css](), [education](), [hosting](), [html](), [links](), [web-development](), [wordpress]() ### AI overview The article welcomes WordPress.com's free one-year Student plan as a practical way for students to host web-development projects. It argues that the plan removes a recurring cost and hosting barrier while still allowing direct code access. ### Source excerpt As someone who teaches beginning web development, I find that building a WordPress site makes for a great final project. Hosting those projects has always been a roadblock though. WordPress.com Student Plan originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well. ## 8 Best Thinkific Alternatives in 2026 for Course Creators DevFeed: [8 Best Thinkific Alternatives in 2026 for Course Creators]() Original publisher: [Read original article]() Author: Deepak Jangir Published: 2026-08-18T00:00:00Z Content type: article Language: en Sources: [Dodo Payments Blog]() Topics: [hosting](), [WordPress](), [Next.js](), [Notion]() Tags: [alternatives](), [billing](), [checkout](), [comparison](), [creator-economy](), [fees](), [global](), [hosting](), [merchant-of-record](), [next-js](), [platform](), [self-hosted](), [tax](), [wordpress]() ### AI overview A comparison of eight Thinkific alternatives for course creators, focusing on platform fees, checkout control, billing, global tax handling, and who is legally responsible for cross-border sales. It highlights hosted platforms, self-hosted WordPress LMS setups, and payment-layer approaches such as Dodo Payments. ### Source excerpt Compare the best Thinkific alternatives for selling online courses in 2026, covering platform fees, checkout control, global tax handling, and the best fit for each seller. ## WordPress.com Education launches free classroom plans for teachers and students DevFeed: [WordPress.com Education launches free classroom plans for teachers and students]() Original publisher: [Read original article]() Author: L. Jeffrey Zeldman Published: 2026-08-17T15:12:09Z Content type: release Language: en Sources: [Jeffrey Zeldman]() Topics: [WordPress](), [Website]() Tags: [automattic](), [blogs-and-blogging](), [career](), [community](), [courseware](), [creativity](), [education](), [free](), [free-software](), [launches](), [learning](), [open-source](), [platforms](), [plugins](), [publishing](), [sftp](), [software](), [ssh](), [students](), [teaching](), [websites](), [wordpress]() ### AI overview Automattic has launched WordPress.com Education, a free classroom product that gives students WordPress.com domains, optional .blog or .art domain names, and plugin support. Teachers can provide access free for the first year without entering payment details. ### Source excerpt Meet WordPress.com Education, a new, free product for teachers and students. The post For students who make websites appeared first on Jeffrey Zeldman Presents. ## 7 best membership and paywall platforms for SaaS and subscription sites DevFeed: [7 best membership and paywall platforms for SaaS and subscription sites]() Original publisher: [Read original article]() Author: Adam Lehman Published: 2026-08-15T00:00:00Z Content type: article Language: en Sources: [Webflow Blog]() Topics: [Software as a service](), [No-code](), [Authentication](), [stripe](), [webflow](), [WordPress]() Tags: [authentication](), [guide](), [hosting](), [no-code](), [payments](), [platform](), [saas](), [strategy](), [webflow](), [wordpress]() ### AI overview A comparison of seven membership and paywall platforms for gating content, communities, courses, and accounts. It evaluates setup, coding requirements, starting prices, transaction fees, and notable features, distinguishing tools that add membership to an existing site from all-in-one platforms and a WordPress plugin. ### Source excerpt Compare the 7 best membership and paywall platforms for websites based on what you are gating. ## AI Chatbot Trained on Your WordPress Content: Setup Guide (RAG Explained) DevFeed: [AI Chatbot Trained on Your WordPress Content: Setup Guide (RAG Explained)]() Original publisher: [Read original article]() Author: Team WPShout Published: 2026-08-14T10:54:34Z Content type: tutorial Language: en Sources: [Back-End Development - WPShout]() Topics: [Retrieval Augmented Generation (RAG)](), [WordPress AI](), [AI Chat](), [WordPress](), [API](), [API keys](), [Open Source](), [PHP](), [GitHub](), [OpenAI]() Tags: [ai](), [api](), [back-end-development](), [chatbots](), [code](), [github](), [learn](), [open-source](), [openai](), [php](), [rag](), [wordpress](), [wordpress-ai](), [wordpress-plugins]() ### AI overview A guide explains retrieval-augmented generation (RAG) and shows how to set up the free Hyve Lite WordPress AI chatbot to answer questions using site posts and pages. It also describes prerequisites, API-key options, and limitations. ### Source excerpt Want a WordPress AI chatbot that answers from your own posts and pages? Learn how RAG actually works, then set up Hyve Lite free, limits and all. ## WordPress AI Connectors: A Developer's Guide to the 7.0 AI Client DevFeed: [WordPress AI Connectors: A Developer's Guide to the 7.0 AI Client]() Original publisher: [Read original article]() Author: Team WPShout Published: 2026-08-13T10:53:25Z Content type: tutorial Language: en Sources: [Back-End Development - WPShout]() Topics: [WordPress](), [WordPress AI](), [API](), [Large Language Model](), [SDKs](), [PHP]() Tags: [anthropic](), [api](), [back-end-development](), [guide](), [llms](), [php](), [plugin](), [sdk](), [wordpress](), [wordpress-ai](), [wordpress-news]() ### AI overview A developer guide to WordPress 7.0's AI connectors and AI Client. It explains provider-agnostic LLM requests, API-key configuration, credential handling, provider plugins, and building a runnable example plugin. ### Source excerpt WordPress 7.0's AI connectors and wp_ai_client_prompt() give any plugin a provider-agnostic way to talk to LLMs. Learn the API and build a working plugin. ## The Best WordPress Developer Hosting Packages in 2026 DevFeed: [The Best WordPress Developer Hosting Packages in 2026]() Original publisher: [Read original article]() Author: Paul Andrew Published: 2026-08-12T18:20:15Z Content type: comparison Language: en Sources: [Speckyboy Design Magazine]() Topics: [WordPress Hosting](), [WordPress](), [hosting](), [Deployment](), [Monitoring](), [GitHub](), [Caching](), [API](), [Command-line interface](), [ssh](), [Git](), [Databases]() Tags: [caching](), [cli](), [database](), [deployment](), [git](), [github](), [monitoring](), [performance](), [php](), [security](), [server](), [ssh](), [tools](), [web-hosting](), [wordpress](), [wordpress-developer](), [wordpress-hosting]() ### AI overview A comparison of WordPress hosting packages for developers, focusing on staging, server access, Git and GitHub workflows, deployment, performance, backups, security, monitoring, team management, scaling, and cost. ### Source excerpt The best WordPress hosting for developers in 2026. Tools, performance, security, and scaling you can rely on. The post The Best WordPress Developer Hosting Packages in 2026 appeared first on Speckyboy Design Magazine. ## What happens to the internet when robots act like humans? DevFeed: [What happens to the internet when robots act like humans?]() Original publisher: [Read original article]() Author: Phoebe Sajor Published: 2026-07-31T07:40:00Z Content type: article Language: en Sources: [Stack Overflow Blog]() Topics: [AI Bots]() Tags: [agentic](), [agentic-ai](), [agents](), [ai](), [ai-governance](), [bots](), [podcast](), [robots](), [se-stackoverflow](), [se-tech](), [wordpress]() ### AI overview A podcast discussion about AI agents acting like humans online, the shared human-and-agent internet experience, and protecting human actions from malicious bots. ### Source excerpt Ryan welcomes WPEngine CTO Ramadass Prabakar to the show to chat about what happens--and what we should do--when agents start acting like humans online, how our internet is evolving to serve both human and agentic experiences from the same interface, and what we can do to differentiate and protect human actions online from malicious bot activity. ## Mitigating WordPress attacks with containers DevFeed: [Mitigating WordPress attacks with containers]() Original publisher: [Read original article]() Published: 2026-07-27T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [WordPress](), [Containers](), [Exploit](), [Vulnerabilities]() Tags: [chainguard-containers](), [containers](), [database](), [distroless](), [files](), [hardened-containers](), [remote-code-execution](), [software-supply-chain-security](), [vulnerabilities](), [wordpress](), [wordpress-cves]() ### AI overview This article examines the wp2shell attack, in which two WordPress vulnerabilities can be chained to achieve remote code execution. It explains that hardened, distroless containers and read-only filesystems can limit an attacker's capabilities and simplify recovery, while emphasizing the need to update WordPress immediately. ### Source excerpt The wp2shell WordPress exploit enables remote code execution. Learn how hardened containers help reduce the blast radius of compromise. ## Security Week 2630: критическая уязвимость wp2shell в WordPress DevFeed: [Security Week 2630: критическая уязвимость wp2shell в WordPress]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-07-20T12:12:37Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [WordPress](), [Security](), [REST API](), [SQL](), [Content Management System](), [Cloudflare]() Tags: [api](), [cache](), [cloudflare](), [cve](), [redis](), [rest-api](), [security](), [sql](), [tag-9fe8963de219](), [web](), [wordpress]() ### AI overview The article reports that two vulnerabilities in WordPress core can be chained into the wp2shell attack. Affected installations are WordPress 6.9.0-6.9.4 and 7.0.0-7.0.1; updates 6.9.5 and 7.0.2 address the issue. The vulnerabilities are identified as CVE-2026-63030 and CVE-2026-60137, involving the REST API request handler and SQL injection. ### Source excerpt Когда речь заходит об атаках на веб-сайты под управлением CMS WordPress, чаще всего подразумеваются уязвимости в сторонних плагинах. Соответственно, и масштаб атаки ограничивается популярностью уязвимого аддона. Обнаруженная на прошлой неделе пара уязвимостей, вместе открывающих возможность для атаки wp2shell, находится в основном коде WordPress и угрожает почти всем владельцам веб-сайтов под управлением данной CMS достаточно современной версии. Конкретнее, полноценной атаке подвержены инсталляции WordPress версий 6.9.0 -- 6.9.4 и 7.0.0 -- 7.0.1. Официальный бюллетень был выпущен разработчиками WordPress 17 июля. В нем предлагалось обновиться на свежевыпущенные версии 6.9.5 и 7.0.2, закрывающие проблему. Сами уязвимости получили собственные идентификаторы: CVE-2026-63030 и CVE-2026-60137. Первая представляет собой ошибку в обработчике запросов к REST API, вторая является классической SQL-инъекцией. Вместе они образуют критически опасную цепочку атаки, позволяющую полностью перехватить контроль над сервером с помощью единственного анонимного запроса. Читать далее ## This site now runs on Astro, not WordPress DevFeed: [This site now runs on Astro, not WordPress]() Original publisher: [Read original article]() Author: Bastiaan Brink Published: 2026-07-19T00:00:00Z Content type: article Language: en Sources: [AS215248 - Notes]() Topics: [Astro](), [WordPress](), [data](), [Web Development](), [Cloudflare](), [Git]() Tags: [astro](), [cloudflare](), [dns](), [git](), [meta](), [network](), [rpki](), [static](), [static-site](), [tooling](), [website](), [wordpress]() ### AI overview The author explains why as215248.net was rebuilt from WordPress as a static Astro site. The site now generates static HTML without a database, PHP, or admin panel, while scripts fetch live network data from services including Globalping, PeeringDB, RIPEstat, RDAP, the NTP Pool, and Tor Metrics. A Git-based process rebuilds and republishes the site daily behind a Cloudflare Tunnel. ### Source excerpt Why I rebuilt as215248.net as a static site, and what it does now -- a live Looking Glass, auto-synced PeeringDB data, and a world map of presence. [Next page]()