WordPress core, plugins, hosting and the product ecosystem.
Showing 1–2 of 2 dossiers
WordPress 7.1 is now generally available. Its always-iframed post editor removes a long-standing split between iframe and non-iframe contexts, while browser-side image processing moves more media work out of PHP and into WebAssembly.
WordPress 7.0.4 fixes CVE-2026-65640, a CVSS 8.8 remote code execution flaw affecting installations that process malicious PostScript uploads through Imagick and Ghostscript. Fixes have also been backported to branches as old as 4.7.
WordPress combines an open-source publishing platform with a large commercial ecosystem. Core releases, block editor work, plugin policy, hosting changes and security incidents can affect millions of sites, yet the practical impact often differs sharply between a hobby site, an agency portfolio and a product business.
BTN covers WordPress when a development changes how people build, maintain, distribute or earn from the platform. The reporting goes beyond announcement copy to examine compatibility, governance, security and workflow. The goal is to help developers and operators decide what needs action now, what deserves a test environment and what is mostly ecosystem noise.
Important commercial and governance decisions belong beside technical releases because they can affect plugin access, update channels and long-term confidence in the platform. BTN treats vendor statements as claims to examine, and keeps the needs of site owners separate from the incentives of the companies around them.