Someone planted backdoors in dozens of WordPress plug-ins used in thousands of websites
Dozens of WordPress plug-ins were allegedly hijacked to push malware after they were sold to a new corporate owner.
Dozens of WordPress plug-ins were allegedly hijacked to push malware after they were sold to a new corporate owner.
New AI agents on WordPress.com could lower barriers to publishing while increasing machine-generated content across the web.
WordPress’s new browser-based service lets users create private sites without hosting or signing up, turning the platform into a personal workspace for writing, research, and AI tools.
The WordPress AI assistant doesn’t need precisely tailored prompts, either.
WP Engine claims Automattic was going to target more hosting companies with royalty fees.
Should a linked web page go offline, the new feature will then redirect readers to the archived versions, so that there is no drop in service. The tool also archives a user’s own posts, helping to ensure their longevity.
Though WordPress’s Telex is still an experiment, the vibe-coding software has already been used to help build real-world websites.
Automattic has filed counterclaims against WP Engine, alleging that the company — backed by private equity firm Silver Lake — misused WordPress and WooCommerce trademarks, misled users, and undermined the open source community.
At WordCamp Canada 2025, Automattic CEO Matt Mullenweg called Tumblr his “biggest failure,” noting the challenge of maintaining the platform’s half a billion blogs while it remains unprofitable. Though plans to migrate Tumblr to WordPress infrastructure are on hold, Mullenweg said he hasn’t given up.