An attacker holding valid UpdraftCentral dashboard keys is installing backdoor plugins on connected WordPress sites. The campaign ran continuously through an 18-hour window on 18-19 October. Patchstack blocks UpdraftCentral remote commands and has deployed mitigation rules covering it.

An interesting change in perspective – Kevin Powell suggests that companies were very happy to embrace AI when it meant firing their employees, but what happens when people replace the companies software with AI created clones?

A Geeky Look at the top 10,000 websites and what they have in the document head. There are some things to fix and some things to add.

It looks like another security incident for RankMath.

In the continuing drama department, Matt kicks accessibility expert and project contributor Andrea Fercia from the WordPress project.

The Mosaic Builder has amazing support for both Advanced Custom Fields and Meta Box. In this video I show how Mosaic works with dynamic data. We will display a Custom Post Type and its custom fields created with Meta Box by creating content templates with Mosaic. We’ll see how easy Mosaic makes it. Although Mosaic is easy to use, it is in many ways very advanced. Near the end of the video I share a reveal that is a game changer.

Congratulations to Alex de Borba and team on the release of version 1 of the Aegis Block theme. Aegis has been in development for several years and is an advanced block theme that helps to realize the potential of block themes and the Site Editor. Here is an overview article and the code is on Github.

The Crocoblock team has released JetEngine 3.9. It introduces nested repeaters (repeater in repeater), repeater dynamic tags to make working with repeater fields easier, a new listing format, the ability to use file input as a query type, and admin pages.

WP_KSES() Sanitizes HTML. It was developed over time and is something of a “coral reef” build up of checks, but it was developed before HTML 5. Now it is being rewritten to simplify and modernize it.