Digest 112: 600K+ Sites at Risk | Malware Targets WP | Plugin Shutdowns Inside

From stealthy malware attacks and plugin vulnerabilities to powerful new tools and fresh themes, this digest brings you everything you need to stay informed, secure, and ahead in the WordPress ecosystem.

Kinsta – High-Performance Hosting for WordPress
Trusted by 120,000+ businesses, Kinsta delivers high-performance, secure hosting for WordPress sites of all sizes. Built on Google Cloud’s Premium Tier with the fastest C2 and C3D servers and 37+ global data centers, Kinsta ensures your site loads fast, anywhere in the world. Explore Kinsta Hosting.

SERP Forge – SEO That Gets You Found
Struggling to rank? SERP Forge helps WordPress brands skyrocket to the top with battle-tested SEO and content marketing strategies. More traffic, more conversions – without the guesswork. Know more.

↑ Brought to you with support from these partners

💡 WordPress Spotlight

WordPress IRT Opens Call for New Contributors
The Incident Response Team (IRT), responsible for handling violations of the WordPress Community Code of Conduct, is inviting new contributors to join the team. Their main job is to provide a safe and respectful space for all community members by acting as a clear contact point for reporting and addressing misconduct. Applications are open until July 6, 2025. (Source)
Stealthy Malware Targets WordPress Sites
A new malware strain is infecting WordPress websites by injecting malicious code into installed plugins and themes. Once active, it delivers a Windows-based Trojan to visitors, potentially compromising their devices without immediate detection. (Source)
11 WordPress Plugins Closed Due to Deprecation & Merged Projects
Jonathan Desrosiers has published a list of 11 plugins that have been officially closed. The reasons range from deprecated functionality and outdated support needs to plugins being merged into larger projects. (Source)
Automattic Pauses Tumblr to WordPress Migration Plans
Automattic CEO Matt Mullenweg has confirmed that the company has halted its efforts to migrate Tumblr to the WordPress platform. While no further details were shared, the decision marks a shift in Automattic’s strategy for its blogging products. (Source)
More Than 600K Sites at Risk from Plugin Bugs
A group of plugin vulnerabilities affecting multiple tools has put over 600,000 WordPress websites at risk of being hijacked. These flaws could allow attackers to bypass authentication, escalate privileges, or plant malware, often without being noticed. (Source)
Upcoming: EventKoi Plugin Launches Demo & Waitlist
After several teaser posts on social platforms, Lesley and Ahmed have officially launched the website for EventKoi, a new events calendar plugin built for WordPress users. It features a modern interface, flexible calendar views, and smart tools for managing online or in-person events. The site is now live with a demo and waitlist for early access. (Source)
WordCamp US 2025 Heads to Portland, Oregon
The next big WordPress gathering is heading to the Pacific Northwest. WordCamp US 2025 will take place in Portland, Oregon, promising a mix of hands-on sessions, community discussions, and forward-looking talks on the open web, accessibility, and WordPress’s evolving role. (Source)
Kinsta at MarTech Summit Hong Kong
Kinsta attended the MarTech Summit in Hong Kong and shared insights on marketing automation, personalization, customer experience, and data-driven decisions. Their recap offers a look at how modern marketing is evolving and how WordPress businesses can stay ahead with the right tech stack. (Source)
High Web Visibility Boosts Mentions in AI Assistants
Ahrefs studied whether being mentioned more on high-visibility web pages increases the chances of showing up in AI assistants like Google AI Overviews, ChatGPT, and Perplexity. The analysis looked at the top 50 websites cited across ~76.7M AI Overviews, 957k ChatGPT prompts, and 953.5k Perplexity prompts in June 2025. (Source)

🏷️ Exclusive Deals Digest

Unlock incredible lifetime deals on the best WordPress tools and services, saving you money while enhancing your website. Don’t miss out on exclusive offers that can transform your WordPress experience.

Browse Lifetime Deals Now

✨ Fresh Features Rollout

Beaver Builder 2.10 Alpha Introduces New Modules and UI Upgrades
The 2.10 Alpha release of Beaver Builder is now available for testing, featuring Assistant Pro cloud integration, a brand-new Star Rating module, and over 60 pre-built Box module templates. It also includes per-page overrides for global components and key UI and accessibility improvements. (Source)
InMotion Hosting Offers High Performance for Serious WordPress Sites
InMotion provides high-performance servers built for demanding WordPress websites. With easy deployment tools, developer-friendly features, and expert support, it’s a solid choice for businesses that need reliable speed and scalability. (Source)
Ultra Addons for Contact Form 7: Adds 45+ Features for Smarter Forms
Ultra Addons for CF7 supercharges Contact Form 7 with over 45 powerful features, including multi-step forms, advanced styling options, and smart integrations. Perfect for building modern, high-converting forms without switching plugins. (Source)
KaiGen Brings AI Image Generation to the Core Image Block
Jacob Schweitzer has launched KaiGen, a plugin that integrates AI image creation directly into the WordPress core image block. Users can generate and edit images based on text prompts using connected third-party AI services all within the block editor. A handy tool for visual content workflows. (Source)
Divi Adds Interactions for Scroll-Based Animations
Elegant Themes has rolled out a new “Interactions” feature in Divi, allowing users to create scroll-based animations without any custom code. These interactions let elements fade in, move, or animate as users scroll down the page, helping you build more engaging and modern page experiences with ease. (Source)
Master Headers and Navigation Blocks with GeneratePress
GeneratePress has published a detailed guide on how to design clean, responsive site headers and navigation menus using its block-based builder. The tutorial walks you through custom layouts, sticky nav setups, mobile responsiveness, and styling tricks perfect for users who want pixel-perfect control without bloated code. (Source)

🆕 Fresh Releases

WENS Trails For Travel Bloggers & Adventure Brands
WENS Trails is a fresh WordPress theme designed for travel bloggers, tour operators, and outdoor adventure brands. It comes with clean layouts, stunning image support, and a focus on storytelling, perfect for showcasing destinations, itineraries, or travel journals. (Source)
EBT & Credit Payments in WooCommerce
This plugin allows WooCommerce stores to accept SNAP EBT, Cash EBT, debit, and credit card payments, helping businesses serve a wider customer base. Ideal for merchants participating in Supplemental Nutrition Assistance Program (SNAP) transactions. (Source)
Kinsta Managed Hosting Powered by Google Cloud C3D Servers
Kinsta delivers managed WordPress hosting with exceptional speed and reliability. Powered by the Google Cloud Platform and the latest C3D servers, it offers lightning-fast load times, scalable infrastructure, and performance ideal for high-traffic sites. (Source)
A Slick Theme for News & Entertainment Sites
If you run a celebrity gossip, entertainment news, or pop culture blog, CelebNews is a sleek new theme built just for that niche. It offers bold headlines, a grid layout, and ad-ready areas ideal for high-traffic, content-heavy sites. (Source)
Set Up Double Opt-In for WordPress Newsletters with WP Fusion
If you’re collecting emails on your WordPress site, double opt-in helps ensure better deliverability and compliance with GDPR and other privacy laws. WP Fusion has released a detailed tutorial showing how to create double opt-in workflows using tools like ConvertKit, ActiveCampaign, and more, all integrated directly with WordPress. (Source)