This week, the WordPress ecosystem is buzzing with major milestones and urgent security news. Elegant Themes has officially launched Divi 5, bringing a completely redesigned editing experience to one of the most popular page builders. Meanwhile, WordPress 7.0 marches closer to release with its fourth Release Candidate now available, and security researchers are sounding alarms over a critical Avada Builder vulnerability exposing over a million sites. Add in FluentCRM 3.0, GoDaddy’s AI-powered Airo, BuddyBoss 3.0, and a fresh wave of new plugins this is a week packed with developments you won’t want to miss.

Peak Performance WordPress Hosting, No Compromises

Leave single-server hosting in 2015. Choose autoscaling Managed WordPress Hosting built for traffic surges, complex sites & demanding PHP workloads, all without missing a beat.

20i Managed WordPress Hosting

↑ Brought to you with support from these partners

💡 WordPress Spotlight

• WordPress AI 0.9.0 Is Out
  The WordPress AI team has released version 0.9.0, marking a major step forward for native AI capabilities within the WordPress editor. This update refines AI content generation tools, improves prompt handling, and adds support for additional AI providers through the standardized WP AI Client interface set to land in WordPress 7.0 Core. Developers building AI-powered extensions will find expanded hooks and better documentation to integrate seamlessly with the evolving AI layer. (Source)
• Over a Million WordPress Sites Exposed by Avada Builder Security Vulnerabilities
  Security researchers have disclosed multiple critical vulnerabilities in the Avada Builder plugin, one of the most widely used page builders in the WordPress ecosystem. The flaws including privilege escalation and SQL injection issues have put over one million active installations at risk. Site owners using Avada Builder are strongly urged to update to the latest patched version immediately, as exploit attempts were detected in the wild shortly after public disclosure. (Source)
• GoDaddy Launches Airo for WordPress
  GoDaddy has officially launched Airo for WordPress, its AI-powered website building suite designed to dramatically lower the barrier to entry for new site owners. Airo uses artificial intelligence to generate a complete WordPress site including theme selection, content, and basic SEO setup based on a few simple prompts about the user’s business. The tool integrates directly into GoDaddy’s managed WordPress hosting platform, positioning it to compete with AI site builders from Wix, Squarespace, and others. (Source)
• WordPress 7.0 Release Candidate 4
  WordPress 7.0’s fourth Release Candidate is now available for testing, bringing the major version closer to its final launch. RC4 focuses on squashing remaining bugs from previous candidates, with particular attention to editor performance, block template reliability, and accessibility improvements across the admin interface. Community members are encouraged to test their plugins and themes against RC4 and report any regressions before the stable release this is likely the last RC before WordPress 7.0 goes live. (Source)
• StellarWP Is No More: What’s Changing for GiveWP, LearnDash, SolidWP, and Your Site
  Liquid Web’s WordPress plugin brand StellarWP is officially shutting down, and the products under its umbrella including GiveWP, LearnDash, and SolidWP are being transitioned to new ownership and branding structures. WPBeginner has published a comprehensive breakdown of what these changes mean for existing users, covering licensing terms, future update paths, and support continuity. If your site relies on any of these plugins, this is essential reading to understand how your workflows may be impacted. (Source)
• FluentCRM 3.0: Big Changes for Email Marketing Automation
  FluentCRM has dropped version 3.0, representing the most significant overhaul of the self-hosted email marketing plugin since its launch. Key changes include a redesigned automation builder with a visual drag-and-drop flow interface, advanced contact segmentation using smart tags, and improved deliverability tools with built-in email warm-up sequences. The update also brings deeper integrations with WooCommerce, LearnDash, and SureCart, making it a more powerful central hub for managing customer lifecycles from your WordPress dashboard. (Source)
• BuddyBoss 3.0: Complete Admin Redesign
  BuddyBoss has released version 3.0 featuring a comprehensive redesign of its admin interface, making it significantly easier to manage online communities and learning platforms built on WordPress. The new admin experience introduces a modular settings panel, improved navigation for managing members, groups, and courses, and a revamped onboarding flow. The update also includes performance improvements under the hood to better support large membership sites with thousands of active users. (Source)
• May 2026 WordPress Developer Roundup
  The May 2026 WordPress developer roundup is live, covering early work on WordPress 7.1 discussions, performance benchmarking initiatives, and key proposals from the core developer community. Highlights include progress on Interactivity API enhancements, a proposal for improved native font management in the Site Editor, and ongoing efforts to streamline the REST API for better headless WordPress support. A must-read for anyone building in the WordPress ecosystem. (Source)
• Over 1 Million WordPress Sites Exposed in Major Plugin Security Flaw
  Security researchers have uncovered two critical vulnerabilities in the popular Avada Builder WordPress plugin, putting over one million websites at risk. The flaws could allow attackers to access sensitive data through SQL injection and arbitrary file read exploits. Website owners are strongly advised to update the plugin immediately to the latest patched version to avoid potential breaches and site compromise. (Source)
• WordPress.com Introduces AI Agents That Can Write & Publish Content Automatically
  WordPress.com has unveiled powerful new AI agent capabilities that allow users to draft, edit, and publish website content using simple natural language commands. The AI tools can also manage comments, organize categories and tags, update SEO metadata, and optimize media elements like alt text and captions. With support for AI platforms such as ChatGPT, Claude, and Cursor through MCP integration, WordPress.com is pushing toward a future where websites can be partially managed by AI-powered assistants while still keeping human approval in the workflow. (Source)
• NEW Security Alert: Burst Statistics Plugin – 200,000 Sites at Risk
  A critical authentication bypass flaw (CVE-2026-8181) in the Burst Statistics plugin allows unauthenticated attackers to impersonate admin users during REST API requests and even create rogue admin accounts. Wordfence has blocked over 7,400 attacks targeting this vulnerability in the past 24 hours. The vulnerability affects versions 3.4.0 through 3.4.1.1 and was patched in version 3.4.2 released May 12, 2026. Users are strongly advised to update immediately. (Source)
• WordPress Core Drops the “Beta” Label for PHP 8.x Support
  The WordPress core team has retired the “beta” label that had been applied to PHP 8.x support since version 8.0, and has removed it retroactively from all previous versions. WordPress 6.9 and 7.0 are now documented as fully supporting PHP 8.5, WordPress 6.8 and later as fully supporting PHP 8.4, and WordPress 6.4 and later as fully supporting PHP 8.3. The label had been causing some hosts and developers to delay updates or avoid testing newer PHP versions, and has now been retired since PHP 8.x updates no longer require significant compatibility work to support. The minimum recommended PHP version remains 8.3. (Source) 
• Automattic Launches Clips Turn Any WordPress Post Into a Short-Form Video
  Automattic has launched Clips, an experimental feature that converts WordPress posts into short-form vertical videos directly from the editor. Write your post as usual, hit Generate Clip in the sidebar, and about a minute later you have a 9:16 video with your headline, cinematic visuals, and a call-to-action saved to your media library and ready to share. It launches with a “Cinematic” style, described as atmospheric and b-roll-driven, suited for travel blog teasers, news article previews, or product promos. Currently available as an early preview for WordPress.com Premium plan users and above, with Jetpack AI and Complete subscribers coming soon (Source)
• Gato AI Translations for Polylang v18 Adds Near-Universal Block Support and Google Gemini
  Gato AI Translations for Polylang has released v18, one of its largest updates, which now supports translating virtually any Gutenberg block, Bricks element, or Elementor widget with minimal setup. New additions include ACF block support, PHP-only blocks introduced in WordPress 7.0, automatic support for any plugin that ships a wpml-config.xml, and built-in coverage for all Kadence and Greenshift blocks. Google Gemini joins the translation provider lineup alongside ChatGPT, Claude, DeepL, and others. The update also integrates with WordPress 7.0’s WP AI Connectors so API keys only need to be entered once across plugins, and adds AI Abilities support for translating entities directly from natural-language prompts in Claude Code or compatible agents. (Source) 

✨ Fresh Features Rollout

• What’s New for Developers: May 2026
  The WordPress developer blog has published its May 2026 edition of “What’s New for Developers,” summarizing the most impactful technical changes in recent Gutenberg and Core releases. Key highlights include new block bindings API improvements, expanded Server-Side Rendering (SSR) controls for performance optimization, and updated editor data stores for better state management in custom plugins. Required reading for anyone building blocks, plugins, or themes. (Source)
• Introducing ActiveLayer: AI-Powered Spam Protection for WordPress
  WPBeginner has introduced ActiveLayer, a new AI-driven spam protection solution designed specifically for WordPress sites. Unlike traditional CAPTCHA approaches that frustrate real users, ActiveLayer uses behavioral analysis and machine learning to silently identify and block spam bots during form submissions, registrations, and comments. The tool works seamlessly with Contact Form 7, WPForms, Gravity Forms, and other popular form plugins with no configuration required. (Source)
• DigitalOcean’s Cloudways Launches Site Manager
  Cloudways, DigitalOcean’s managed cloud hosting platform, has launched Site Manager a new centralized dashboard designed to help agencies and freelancers manage multiple WordPress sites from a single unified interface. Site Manager allows users to monitor site health, automate backups, manage plugin and theme updates, and track uptime across dozens of client sites simultaneously. The feature addresses a longstanding pain point for WordPress agencies who previously had to juggle multiple hosting dashboards. (Source)
• SurelyWP Launches Custom SureCart Development Services for WordPress Stores
  SurelyWP has officially launched custom SureCart development services, helping WordPress businesses build tailored ecommerce experiences with the growing SureCart ecosystem. The service includes custom plugin development, advanced store functionality, integrations, and workflow automation designed specifically for SureCart-powered websites. As SureCart adoption continues to grow among WordPress users, SurelyWP aims to provide businesses with scalable and conversion-focused ecommerce customization solutions (Source)
• Jetpack Search Now Surfaces AI-Generated Answers Directly in Results
  Jetpack has added AI Answers to its search feature, which now reads your site’s content and delivers a direct, cited response at the top of search results instead of just a list of links. It runs multiple searches in parallel at varying levels of precision to reduce dead-end queries, then passes the results to an AI model that generates a concise summary grounded entirely in your own content. Source links are always shown so visitors can read the full post. It’s live now on WordPress.com and arriving with Jetpack Search 7.0 for self-hosted sites, requiring a paid Jetpack Search subscription. (Source)
• FluentCommunity 2.5.0 Adds Sequential Lesson Lock and a Refreshed Notifications System
  FluentCommunity 2.5.0 ships Sequential Lesson Lock for courses (Pro), keeping each lesson gated until the previous one is completed  useful for training programs and certification paths where order matters. The notifications system gets a dedicated Unread tab, a Recent popover showing the last twenty notifications, and comment reaction alerts that group multiple reactions on the same comment into a single tidy ping. The update also adds post scheduling for Space admins, a Courses tab on member profiles, a scroll-to-top button, and cleaner mobile navigation that hides the header and footer on scroll. (Source) 
• Modular DS 3.0 Arrives with Malware Scanning, Broken Link Checker, and Bulk Site Import
  Modular DS has released version 3.0, its largest update to date, adding malware scanning through an Imunify integration that checks site files and databases for compromised content complementing the existing Patchstack vulnerability protection. A built-in broken link checker lets you scan connected sites on a schedule or on demand, with the option to fix internal broken links by creating redirects directly from the platform. New global management screens give a cross-site view of backups, uptime, malware scans, and broken link status, and a bulk site import tool replaces the previous one-by-one connection process. (Source) 

🆕 Fresh Releases

• Noted! Brings Lightweight Admin Notes to WordPress
  Noted! is a lightweight new WordPress plugin designed to help admins store quick notes, reminders, and project instructions directly inside the WordPress dashboard. Created by Kyle Van Deusen, the plugin offers a clutter-free “project memory bank” that stays accessible from both the front-end and admin area. With a simple interface and zero unnecessary bloat, Noted! is aimed at agencies, developers, and site managers who want an easy way to keep important website information organized inside WordPress itself. (Source)
• ProfileSwitch Lite Simplifies User Account Switching in WordPress
  ProfileSwitch Lite is a newly released WordPress plugin that allows admins and site managers to quickly switch between user accounts without logging out and back in repeatedly. The plugin is designed for developers, membership site owners, and support teams who need a faster way to test user roles, troubleshoot permissions, and manage multi-user environments. With a lightweight setup and streamlined dashboard integration, ProfileSwitch Lite aims to make WordPress user management more efficient for everyday workflows. (Source)
• Notifal Brings Smart Popups & Conversion Notifications to WordPress
  Notifal is a newly growing WordPress popup and notification builder designed to help site owners boost conversions, collect leads, and improve user engagement without coding. The plugin supports popups, floating bars, slide-ins, inline notifications, and WooCommerce-focused alerts, all powered through Elementor and the native Block Editor. It also includes advanced targeting, behavioral triggers, analytics, and a growing template library, making it a flexible solution for marketers, ecommerce stores, and content creators looking to increase on-site conversions. (Source)
• WPFolks Launches Folks TV
  WPFolks has announced Folks TV, a dedicated video channel on X (formerly Twitter) focused entirely on WordPress content tutorials, product demos, community spotlights, and developer walkthroughs. This initiative brings more video-first WordPress education to the platform where many WordPress professionals already engage, building on the WPFolks community’s reputation for high-quality content. (Source)
• SiteFort Helps WordPress Sites Strengthen Security & Performance
  SiteFort is a newly released WordPress plugin focused on improving website security, monitoring, and overall site stability. The plugin aims to help WordPress admins protect their sites through streamlined management tools, security-focused configurations, and performance optimization features. With lightweight integration and an easy setup process, SiteFort positions itself as a simple solution for users looking to harden WordPress installations without adding unnecessary complexity. (Source)
• Divi 5 Has Officially Arrived
  Elegant Themes has officially confirmed that Divi 5 is here, delivering years of development in a ground-up rebuild. Divi 5 introduces a new visual building engine with dramatically improved performance, a redesigned interface that is faster and more intuitive, and a full React-based architecture for better compatibility with modern WordPress Core. The Divi 5.5 release brings additional refinements including improved responsive controls, enhanced global design system management, and optimized code output for better Core Web Vitals scores. (Source)
• FlowBlinq AI Boost Brings AI-Powered Content & SEO Automation to WordPress
  Flowblinq AI Boost integrates AI-powered content optimization tools directly into the WordPress editor, helping creators improve writing with real-time suggestions for better readability, SEO enhancement, and engagement optimization all without leaving the editor. The plugin is designed to complement rather than replace existing SEO and writing tools. (Source)
• Crocoblock Launches JetMessenger plugin Context-Aware Private Messaging for WordPress
  Crocoblock has released JetMessenger, a self-hosted private messaging plugin for WordPress where every conversation is tied to a specific context: a product, order, booking, or post. It requires no third-party services, keeping all chat data inside your own WordPress database for full GDPR compliance. The plugin supports direct messaging, post messaging, and WooCommerce order and product messaging, with builder widgets for Elementor, Gutenberg, and Bricks. (Source)
• Cool Plugins Launches TranslateXYZ  AI Translation Addons for WordPress
  Cool Plugins has launched TranslateXYZ, a suite of AI-powered translation addons that plug into the multilingual tools you already use Polylang, TranslatePress, WPML, and Loco Translate. Each addon connects to providers like OpenAI, Gemini, Claude, DeepL, and Google Translate, letting you run bulk AI translations without leaving your existing workflow. Free versions are available on WordPress.org, with the full four-plugin bundle starting at $100 per year. (Source) 

🗓️ Mark Your Calendar 

If you’re looking for opportunities to network and learn, check out these upcoming WordPress events and meetups:

Flagship WordCamps

June 04 – 06, 2026: WordCamp Europe 2026, Krakow, Poland

August 16 – 19, 2026: WordCamp US 2026, Phoenix, Arizona

April 09 – 11, 2027: WordCamp Asia 2027, Penang, Malaysia

Offline Events for WordPress

September 23, 2026: LoopConf 2026, event for WP developers & engineers

Upcoming WordCamps

July 03, 2026: WordCamp Mannheim 2026, Mannheim, Germany

July 04, 2026: WordCamp Masaka 2026, Masaka, Uganda

September 11, 2026: WordCamp Switzerland 2026, Fribourg, Switzerland

September 18, 2026: WordCamp Bretagne 2026, Rennes, Brittany, France

October 03, 2026: WordCamp Rajasthan 2026, Jaipur, Rajasthan, India

November 05, 2026: WordCamp Canada 2026, Vancouver, Canada

November 12, 2026: WordCamp Netherlands 2026, Netherlands

November 13, 2026: WordCamp Pisa 2026, Pisa, Italy
October 16, 2026: WP Suomi 2026, for Nordic WP enthusiasts, Oulu, Finland.

Wrap-Up

That’s a wrap for this week’s WPDigest! Stay tuned for more exciting WordPress updates next week.

Want to feature your WordPress product, service, or update news? Submit it for free using our form, helping spread the goodness of WordPress!

📩 Enjoyed this digest? Share it with your network!