WordPress & WooCommerce Blog
Latest news — check out what we’ve been building.
Latest posts
-
CVE-2026-48888: WooCommerce Core DoS — Update to 11.1.0 or Later
CVE-2026-48888 (CVSS 7.5) can exhaust server resources on any WooCommerce store running a version older than 11.1.0. The…
-
WordPress vs Next.js in 2026: Which Should You Actually Choose?
WordPress scores 35-55 on PageSpeed out of the box, Next.js hits 95-100 — but that gap doesn’t tell…
-
WordPress 7.1: What’s New (And What to Test Before You Update)
WordPress 7.1 moves image processing into your browser, adds Tabs and Playlist blocks, and styles hover states with…
-
CVE-2026-19632: TranslatePress Account Takeover — Check Your Config Now
CVE-2026-19632 can leak an admin’s password-reset link through TranslatePress’s own translation table. Update to 3.3.4+ and check your…
-
How to Turn Your WooCommerce Store Into a Multi-Vendor Marketplace
Adding multiple vendors to WooCommerce means product ownership, order-scoped permissions, and payouts — here’s what to check before…
-
CVE-2026-0740: Ninja Forms File Uploads RCE — Are You Still Exposed?
CVE-2026-0740 lets attackers upload a webshell to Ninja Forms File Uploads sites with no login. A March patch…
-
WooCommerce 11.1: What’s New for Store Owners (and Should You Update?)
WooCommerce 11.1 (Sept 1, 2026) ships native variation galleries, faster REST APIs, and an EU refund endpoint. Here’s…
-
CVE-2026-18391: WooCommerce Subscriptions RCE — Check Your Version Now
WooCommerce Subscriptions has a critical CVSS 9.8 RCE vulnerability (CVE-2026-18391) affecting HPOS users. Update to 7.9.1, 8.8.2, or…
-
AutoScout24 Inventory Sync for WordPress Dealers
How AutoScout24 inventory sync works for WordPress dealer sites, the difference between import-only and full two-way sync, and…