A new version of FluentComments was released. It brings AJAX commenting, spam protection, and additional email options to the default commenting system. FluentComments works with Classic themes, Block themes, and page builders. In the walk-through I show all three options, including adding a comments area to templates for the new Mosaic Builder.

The Mosaic team has largely fixed the output issues and simplified the class system.

The WordPress security team received 773 reports of security vulnerabilities in August, up from around 20-30 a month last year. The team starts to put some new limitations on what they will accepts via the HackerOne disclosure program.

It looks like we are getting closer to the release of Bricks 2.4. The release candidate was just released. It has a number of fixes and refinements.

Equalize Digital has a new, free plugin, for displaying board meeting agendas and minutes. If you have managed a non-profit or local government site you know that sharing this information is required, but not always easy to do. BoardScribe is available in the plugin directory.

If I was reading this correctly, the payload is planted using a ping-back. I wonder how many of these types of holes there are?

It looks like more vulnerabilities were found after the team patched Pods earlier in the mont

Konstantin Ryabitsev from the Linux Kernel team reports on their fight with AI bots. The current situation doesn’t seem sustainable.

Surprisingly there is nothing on the plugin page on WP org about Rank Math creating unauthorized admin access. I would expect that Rank Math would be suspended, at least until fixed, if not for longer. Roger Montti’s report helps to get the word out about this bad behavior.