This is interesting, WordPress 7.1 will include a theme framework with CSS variables. It will be available for plugins to use for creating a consistent UI.

WordPress 7.1 will include browser-based media processing. The features supported are pretty extensive. This looks like it will be a nice feature that will have broad appeal.

Patchstack shares their observations about the wp2shell attacks. Attacks began 90 minutes after 7.0.2 was released. The way the vulnerabilities were exploited changed to by-pass early firewall rules that were rolled out.

WordPress security is always a sensitive topic. We recently got the WP 7.0.2 release and here’s an article that explains the exploits in more detail.

WordPress 7.0.2 is starting to roll out. The on-site information says it is a security release, but the release notes and option to manually download are not available yet.

A few weeks ago a proposal was floated to merge into core a new Knowledge post type which would primarily be a feature for AI use. Community sentiment was not to bloat core with the feature. It seems Matt agreed and it won’t be included in 7.1. Here is The Repository’s reporting with the details.

WP Org plugin updates being delayed up to 24 hours for AI security scanning.

React was updated from version 18 to 19 in the Gutenberg plugin as a step in shipping the update with WordPress 7.1. However, issues surfaced due to Gutenberg addons that include their own version.

The project is dropping the “beta” label on PHP version support. It created the wrong impression and was prompting some users and hosting providers to avoid updating to new versions.