News

WooNinjas has released a new WooCommerce bookings plugin aimed at WordPress store owners who want to sell appointments, reservations, classes, rentals, or other time-based services. The launch expands WooCommerce beyond traditional products, giving businesses a way to manage bookings through the familiar WordPress and WooCommerce environment. Key takeaways WooNinjas’ new plugin is designed for selling…

Read More

WordPress 7.1 Beta 4 is now available for testing alongside the Gutenberg 23.6 release, bringing another round of improvements ahead of the platform’s planned August launch. The update focuses heavily on stability, with more than 114 changes since Beta 3. For site owners, it is a useful preview—but not yet production-ready software. Key takeaways WordPress…

Read More

Millions of WordPress websites could be exposed after researchers found malicious code in five compromised plugins. The code reportedly allowed attackers to create unauthorised administrator accounts, potentially leading to website takeovers, data theft and malware distribution. Website owners should check affected installations immediately and review their wider WordPress security practices. Key takeaways The reported compromise…

Read More

A critical backdoor discovered in the Advanced Responsive Video Embedder (ARVE) WordPress plugin could have given attackers full administrator access using a single secret token. Wordfence detected the malicious code before WordPress.org distributed the affected release through automatic updates, limiting the immediate risk to the plugin’s roughly 20,000 active installations. Key takeaways WordPress site owners…

Read More

A serious WordPress core vulnerability known as WP2Shell has prompted an urgent response from the WordPress project. By chaining two separate flaws, unauthenticated attackers may gain remote code execution and take over affected websites without plugins, themes or login credentials. Site owners should verify their versions and updates immediately. Key takeaways WP2Shell combines CVE-2026-63030 and…

Read More

A security researcher recently utilised AI to uncover a critical vulnerability chain in WordPress, dubbed "WP2Shell," for a mere $25 in compute costs. This discovery underscores the evolving threat landscape for website owners, where automated tools now enable attackers to find and weaponise security flaws with unprecedented speed and minimal investment. Key takeaways WP2Shell is…

Read More

The WordPress ecosystem is currently facing a wave of critical security threats, ranging from core software vulnerabilities to malicious backdoors in popular plugins. With tens of thousands of websites potentially exposed to remote takeovers, it has never been more important for site owners to prioritise proactive security and regular maintenance. Key takeaways Critical flaws in…

Read More

WordCamp Kathmandu 2026 is set to take place on September 18–19 at Alice Receptions in Gairidhara, bringing together over 500 WordPress professionals from across the globe. This flagship event aims to bridge the gap between Nepal’s rich cultural heritage and the collaborative, innovative nature of the world’s most popular open-source platform. Key takeaways Event dates:…

Read More

A critical security flaw known as ‘wp2shell’ is currently being exploited in the wild, targeting WordPress websites across the globe. This vulnerability chain allows unauthenticated attackers to gain full administrative control over your site. With hackers actively scanning for vulnerable installations, taking immediate action to secure your platform is essential for protecting your business and…

Read More