Digest 116: ⚠️ Critical Vulnerability Alert for TablePress & Ocean Extra

This week’s digest is packed with critical news: a major roadmap for WordPress 6.9, new AI tools for content creators, and urgent security warnings affecting millions of sites. Dive in for all the essential updates you need. 👇

Kinsta – The Future of WordPress Hosting is Here
Trusted by over 120,000 businesses, Kinsta is engineered for performance-optimized, secure, and reliable WordPress hosting. Our platform is built on Google Cloud’s fastest C2 and C3D servers and Premium Tier network, ensuring lightning-fast load times across 37+ data centers worldwide. Every plan includes enterprise-level Cloudflare integration and a suite of powerful features, from advanced security and daily backups to developer tools like WP-CLI and Git integration.

Boost your website’s performance today.

SERP Forge – Transform Clicks into Customers
Cut through the digital noise and get your content found. SERP Forge provides powerful SEO and content marketing strategies that turn traffic into revenue. We don’t just help you rank; we help you dominate, ensuring you get more qualified leads, more conversions, and a bigger bottom line.

Ready to get found? Get in touch..

↑ Brought to you with support from these partners

💡 WordPress Spotlight

WordCamp Asia 2026 Heads to Mumbai
The WordCamp Asia team has officially announced that the 2026 conference will be held in Mumbai, India, at the Jio World Convention Centre from April 9-11. The event will include a Contributor Day followed by two days of conference sessions, offering a platform for developers, designers, and enthusiasts to connect and collaborate. (Source)
Portland Hosts a Successful WordCamp US
WordCamp US 2025 wrapped up in Portland, Oregon, with a strong focus on community, innovation, and learning. The event featured keynotes on the future of AI and search, hands-on workshops, and a Contributor Day where participants worked on core WordPress projects. A new initiative, the Open Horizons Scholarship, was also announced to promote inclusivity within the community. (Source)
CookieAdmin Reaches 50,000 Installs
Lightweight and GDPR-compliant cookie consent plugin, CookieAdmin, has hit a major milestone, surpassing 50,000 active installations in less than a month. The rapid growth is attributed to its user-friendly design and robust features for privacy compliance, and the team is already planning new enhancements. (Source)
How AI Tools Can Build WordPress Websites
Crocoblock’s CTO, Andrew Shevchenko, demonstrates how to use AI builders like Bolt and Lovable in conjunction with WordPress and Crocoblock plugins. The article explains how this powerful combination allows users to create production-ready, dynamic websites with robust backend functionality (like forms and filters) by simply using AI prompts. (Source)
Kinsta Redesigns Homepage to Focus on Performance:
Kinsta has redesigned its homepage to highlight its commitment to performance hosting. The new design focuses on key features such as its use of Google Cloud’s C2 and C3D servers, its global network of 37+ data centers, and its built-in Application Performance Monitoring (APM) tool. (Source)
Matt Mullenweg Reflects on WordCamp US 2025 and Announces Future Events
In a post-event blog post, WordPress co-founder Matt Mullenweg shares key takeaways from WordCamp US. He noted that traffic to WordPress.org is up and that the plugin queue time has been reduced from months to just a few days. He also previewed upcoming features for version 6.9, including Block Comments and a new Command Palette. Most notably, he announced the locations and dates for two major flagship events: WordCamp Asia 2026 in Mumbai and WordCamp US 2026 in Phoenix, Arizona. This was also confirmed via the official WordPress social media channels. (Source)
Elementor Hosts Get Built-in Security with Patchstack
Elementor has partnered with Patchstack to provide real-time vulnerability scanning and alerts for all Elementor Host customers. The integration runs at the infrastructure level, requires no setup, and offers an optional upgrade for real-time mitigation rules to protect sites from exploits. This adds a new layer to Elementor’s hosting service, alongside its focus on speed and customer support. (Source)
Rocket.net Joins Forces with Hosting.com
Rocket.net has announced a new strategic partnership with hosting.com to scale its managed WordPress hosting platform. As part of the partnership, Rocket.net founder Ben Gabler will become the Chief Product Officer at hosting.com, while Rocket.net will continue to operate independently under General Manager Jessica Frick. The collaboration aims to bring Rocket.net’s high-performance platform to hosting.com’s large customer base and reinvest in its technology. (Source)
Telex: Automattic’s AI Block Builder
Automattic has launched Telex, an AI-powered tool that helps users create custom WordPress blocks. The new tool works by taking a user’s description of a desired block and automatically generating the code to build it, simplifying the process of creating complex, custom functionalities for WordPress sites. (Source)
Gemini’s Image Editing Gets a Major Upgrade
Google has unveiled an updated image editing model for the Gemini app, designed to give users more control over their visuals. The new model focuses on maintaining a subject’s likeness across edits, allowing you to change a person’s outfit or put your pet in a new scene while keeping them consistent. The update also adds the ability to blend multiple photos and supports “multi-turn editing” to refine images with a series of prompts. All AI-edited images include both a visible and an invisible watermark. (Source)
WordPress Foundation’s Trademark Bids Refused by USPTO
The U.S. Patent and Trademark Office (USPTO) has refused the WordPress Foundation’s attempts to trademark “Managed WordPress” and “Hosted WordPress.” The refusal was due to issues with descriptive terms, vague service descriptions, and an invalid postal address. The Foundation has since filed updated requests to address these concerns, continuing its broader push to control the WordPress brand, which has already been granted trademark protection in the UK, Australia, and the European Union. (Source)
WordCamp Nepal 2026 Officially Scheduled
WordCamp Nepal 2026 is officially scheduled for January 23rd-24th in the city of Butwal. The two-day event will kick off with a Contributor Day on Friday, followed by the main conference on Saturday, offering a chance for the local community to connect, collaborate, and learn. (Source)
Critical Vulnerabilities in TablePress and Ocean Extra
Two popular plugins have been found to have critical vulnerabilities. A stored Cross-Site Scripting (XSS) flaw in TablePress affects over 700,000 sites, and a similar vulnerability in Ocean Extra impacts up to 600,000 sites. Both issues allow authenticated users with contributor-level access to inject malicious scripts. It is highly recommended that all users update TablePress to version 3.2.1 and Ocean Extra to version 2.5.0 or higher immediately to patch these security holes. (Source, Source)
WordPress.com Upgrades Staging Sites
WordPress.com has rolled out significant improvements to its staging site feature for Business and Commerce plan users. The redesigned interface offers a new environment switcher, selective syncing of content and files, and a cleaner, more intuitive dashboard, making it easier to test changes without affecting a live site. (Source)
LLM Optimization (LLMO) is the New SEO
According to a new article by Neil Patel, the next frontier in digital marketing is LLM Optimization (LLMO). Unlike traditional SEO, which focuses on ranking in search results, LLMO is about getting your content cited and recommended directly within AI-generated responses from large language models like Gemini. The article suggests focusing on creating authoritative, structured content with high-authority backlinks to gain visibility in this new “zero-click” search landscape. (Source)
WPMayor Reviews WCB Configurator Builder
A new review highlights the WCB Configurator Builder plugin for WooCommerce, praising its ability to simplify complex product customization. The plugin uses a drag-and-drop interface within the native WordPress Site Editor and provides customers with real-time visual updates. (Source)
Kitchen Sink WordPress Podcast Celebrates 600 Episodes
The Kitchen Sink WordPress Podcast, hosted by Andrew Palmer, released its 600th episode, featuring an interview with Adam Warner. The episode also highlighted a new tool from Patchstack for testing hosting environments and covered upcoming WordCamp events. (Source)
WPForms Launches New PDF Addon
WPForms has released a new PDF Addon that automatically converts form entries into professional PDF documents. The feature includes a live preview editor and customizable templates, allowing users to create everything from invoices and contracts to certificates and notifications. (Source)

🏷️ Exclusive Deals Digest

Unlock incredible lifetime deals on the best WordPress tools and services, saving you money while enhancing your website. Don’t miss out on exclusive offers that can transform your WordPress experience.

Browse Lifetime Deals Now

✨ Fresh Features Rollout

Gutenberg 21.5 Introduces New Accordion Block and Command Palette
Gutenberg 21.5 has been released, bringing several key enhancements to the block editor. The new experimental Accordion block allows for easily collapsible content, while the Command Palette is now available in the Admin Dashboard, marking a first step towards its wider implementation across WordPress. The update also adds support for border-radius presets in theme.json, helping designers create more consistent styles. (Source)
Divi 5 Public Alpha 21 Adds New Modules
The latest public alpha for Divi 5 introduces new modules for the builder, including a Group Carousel, Icon List, and Lottie module for adding advanced animations. The update also includes a new responsive editor, improvements to WooCommerce modules, and various bug fixes and performance enhancements. (Source)
SEOPress 9.1 Integrates ChatGPT-5 and Enhances Site Audit
SEOPress 9.1 is a major update that adds support for ChatGPT-5 to automatically generate SEO metadata and image alt text. The update also includes a new tool to import global settings from AIOSEO and adds enhancements to the Site Audit feature, such as the ability to resume interrupted scans and set the number of URLs to analyze per batch. (Source)
FluentBooking 1.9.0 Adds Coupon Codes and UTM Tracking
FluentBooking has released version 1.9.0, which introduces coupon codes for discounts and promotions. The update also adds UTM tracking to help users monitor which marketing campaigns are driving the most bookings. Additionally, the plugin now has a new, unified payment settings area to simplify management of payment gateways. (Source)
Fluent Forms 6.1.1 & Pro 6.1.0 Introduces a New Report Module
This update for Fluent Forms adds a new Report module for gaining deeper insights into form submissions and performance. Pro users can also get a PDF download of their reports. The update also introduces Smart Address Autocomplete using HTML5 geolocation and adds a one-time use option for Save and Resume links to enhance security. (Source)
Code Snippets Pro 3.7 Adds Conditional Logic
The new version of Code Snippets Pro introduces Snippet Conditions, a major new feature that allows users to apply conditional logic to their code snippets. This enables snippets to be executed only on specific pages, for certain users, or under any other predefined conditions, providing more control over where code runs. (Source)
WP Amelia 8.5 Enhances Security and Pricing
The latest update to WP Amelia adds dynamic pricing rates that can be set based on the time of day or day of the week, with a color-coded calendar to show price changes. It also adds Google reCAPTCHA support for login forms to improve security and introduces a new Mailchimp integration for email marketing. (Source)
Easy Digital Downloads Launches Multi-Currency Auto-Detection
A new feature for Easy Digital Downloads now automatically detects a visitor’s location and displays prices in their local currency. This functionality works right out of the box using built-in geolocation technology, providing a seamless, localized shopping experience. (Source)
GenerateBlocks 2.1.1 Adds Security Fixes
The latest point release for the GenerateBlocks plugin is a security and maintenance update. It includes a fix to remove sensitive values from the REST API for logged-in users and resolves several bugs related to image links and shortcode parsing. (Source)
Bricks Addons Adds Favorites Button and WooCommerce Swatches
The latest update for Bricks Addons introduces a new Favorites Button element, allowing visitors to save content for later. The update also adds WooCommerce Product Swatches to replace dropdowns with visual color or size swatches and new form fields, including an international phone number field and a signature field. (Source)
Charitable 1.8.8 Improves Donation Forms
The latest update to Charitable, the donation plugin, includes several minor improvements, primarily to donation forms, to enhance usability and security. (Source)

🆕 Fresh Releases

Seline Analytics
A new, privacy-first analytics plugin for WordPress, Seline Analytics offers a simple and GDPR-compliant alternative to traditional analytics tools. The plugin is designed to collect visitor data without the use of cookies or the need for a cookie banner, anonymizing IP addresses by default. It includes a free tier for sites with up to 3,000 page views per month. (Source)
eKart Theme
A new fast, clean, and lightweight WooCommerce theme, eKart is designed for a variety of e-commerce stores. The theme is a child theme of “Shopire” and is fully responsive and compatible with popular plugins like Elementor, WPML, and Yoast SEO. It is also SEO-friendly and RTL-ready. (Source)
EazyDocs
A powerful new knowledge base and documentation builder plugin that offers a complete solution for creating documentation, help desks, and wikis. EazyDocs features a drag-and-drop builder, live search, and a “Doc Helper Assistant” for instant results. The premium version includes advanced features like a one-page documentation layout, footnotes, and contributor management for collaborative editing. The plugin also offers Elementor integration for custom layouts. (Source)
Cleanly
A new all-in-one booking plugin designed specifically for cleaning service businesses. Cleanly streamlines the entire booking process with features like staff and branch management, a live price calculator, and a centralized booking calendar. The plugin also offers automated notifications via email, WhatsApp, and Slack, accepts multiple payment gateways (Stripe, PayPal, WooCommerce), and provides a comprehensive dashboard for sales and tax reports. (Source)
Bulk SEO Importer (Lite)
This new plugin is a free tool for streamlining SEO operations. It allows users to import and export SEO titles, meta descriptions, and slugs in bulk via CSV. The plugin automatically detects and integrates with popular SEO solutions like Yoast, Rank Math, and AIOSEO, ensuring a seamless workflow. (Source)