Digest 117: AI Commerce, PHP Playground, & A WordPress Security Wake-Up Call

This week’s digest covers major AI shifts as WooCommerce integrates Agentic Commerce and Builderius leverages AI for GraphQL. We detail critical security fixes in WordPress 6.8.3 and a new alert on malicious PHP code injection, urging immediate vigilance. Plus, dive into the new in-browser PHP Playground, fresh releases like SugarCart and Creator LMS, and key updates from Divi and Elementor that will power your next project.👇

---

Kinsta – The Future of WordPress Hosting is Here
Join the 120,000+ businesses who rely on Kinsta for secure, reliable WordPress hosting. Built entirely on Google Cloud, every plan offers advanced security, auto-scaling, and daily backups. We eliminate hosting headaches so you can focus on growth. It’s premium infrastructure, simplified.

See why 120k businesses trust Kinsta

SERP Forge – Transform Clicks into Customers
Outrank the competition with a proven strategy. SERP Forge provides the specialized SEO and content expertise needed to ensure your business doesn’t just rank, it dominates its niche. We optimize your visibility to capture high-value traffic and accelerate your conversion funnel.

Get the strategy you need to dominate

---

↑ Brought to you with support from these partners

💡 WordPress Spotlight

• Test PHP with the New In-Browser PHP Playground
  Adam Zieliński has launched the PHP Playground, an online PHP code editor built on WordPress Playground. It allows developers to quickly test PHP code snippets, use core WordPress functions, switch PHP and WP versions, and share their exact setup—all running directly in the browser. (Source)
• WordPress Initiatives to Tackle Community’s Aging Demographic
  A WP Tavern podcast highlighted two key educational initiatives: WordPress Campus Connect, which teaches open-source skills to students, and the WordPress Credits Program, which grants academic credit for contributions. These programs aim to bridge the academic-industry gap and ensure the community’s long-term sustainability. (Source)
• New Self-Paced Courses to Master WordPress
  WordPress.com has launched a library of free, self-paced courses for all skill levels. Initial offerings include video courses on how to Create Your Website and Create Your Blog, plus a text-based Introduction to SEO. The goal is to provide clear, practical guidance for beginners and small business owners. (Source)
• Freemius Lowers Fees and Simplifies Pricing for Makers
  Freemius announced its biggest pricing change in history (effective Oct 1, 2025), rolling out simpler, lower fees for all software makers. For WordPress makers, the new progressive model starts at 7% and drops to 0.5% for revenue over $100k/month. This change offers a significant reduction for new and small businesses. (Source)
• Community Responds to Fund Misappropriation, Announces Policy Change
  WordPress Community Support (WPCS) reported a 2024 WordCamp organizer misused approx. $734 in surplus funds. The organizer is permanently banned from all WP events and accounts. To prevent recurrence, WPCS will immediately implement a new policy: Global Sponsorship Grants will now be sent in smaller, phased payments to all locally-funded events. (Source)
• A11y Team Prepares New Public Documentation Platform
  The WordPress Accessibility Team is launching a new documentation platform at wpaccessibility.org. All existing handbook content has been migrated, and a crucial pull request preview option has been implemented, allowing anyone to easily review proposed content without a local install. The team is calling for contributors to help write and review documentation. (Source)
• Bit Social Celebrates One Year of Growth
  Social media scheduling tool Bit Social marked its one-year anniversary on October 1st, 2025. The product, which allows users to schedule WordPress posts to social media, announced a major milestone: it is now used by over 4,000 businesses, highlighting its rapid growth in the space. (Source)
• WordCamp Asia 2026 Opens Call for Sponsors
  WordCamp Asia 2026 has opened its call for sponsors for the event, taking place in Mumbai, India, on April 9–11, 2026. With over 2,500 attendees expected, the event offers seven sponsorship tiers. The deadline to apply is December 15, 2025. (Source)
• WooCommerce Integrates AI for Agentic Commerce
  WooCommerce is moving into Agentic Commerce, enabling AI assistants to autonomously discover products and complete purchases on behalf of customers. WooCommerce 10.3 will introduce the WooCommerce MCP (based on the WordPress Abilities API), allowing AI clients like Claude to manage stores. This work ensures stores are ready for off-site AI-driven transactions. (Source)
• WPExperts Acquires Gutena Forms Plugin
  WPExperts has acquired the Gutena Forms plugin (20,000+ active installs) and other Gutena block plugins. The acquisition targets the block editor ecosystem, as Gutena Forms was purpose-built for Gutenberg. WPExperts plans to extend the plugin’s functionality to offer advanced form features entirely within the native block editing mode. (Source)
• WooCommerce Partners with Snapchat for Ads Integration
  WooCommerce and Snapchat have launched a new integration making it easier for Woo merchants to advertise to Snapchat’s global audience. Merchants can now build dynamic, shoppable ads directly inside Snapchat Ads Manager, benefiting from one-click catalog syncing and simplified setup of the Snap Pixel and Conversions API for better ad targeting. (Source)
• Shopify Promotes WordPress Integration and Checkout Conversion
  Shopify is promoting its free WordPress plugin, which converts any WP site into an online store powered by the Shopify checkout. The plugin allows seamless product addition via the Block Editor, with Shopify handling inventory, analytics, and built-in security. Shopify explicitly claims their checkout converts 17% better than WooCommerce. (Source)
• TemplateMonster Opens Voting for 2025 Community Awards
  TemplateMonster has launched the Monster’s Award 2025, its biggest WordPress Community Product Award. The contest features multiple categories, including Maintenance Plugins, WooCommerce Plugins, Hosting, and AI Plugins. The call for public voting is now open, with a deadline of November 20. (Source)
• Builderius Introduces AI-Assisted GraphQL Development
  The Builderius WordPress visual builder now integrates AI-assisted GraphQL development. The AI acts as a teaching assistant, guiding developers through project work and explaining query structure to help them learn and apply GraphQL concepts effectively while building dynamic WordPress sites. (Source)
• Hackers Insert Malicious PHP Code into Theme Files
  A new security alert reports that cybercriminals are covertly altering WordPress theme files, specifically appending a subtle PHP injection to the active theme’s functions.php. This code dynamically constructs and retrieves malicious JavaScript from external domains, turning compromised sites into clandestine distributors of advertisements and malware while evading overt detection. (Sources)
• WordCamp Dhaka Ticket Sales Face Massive Technical Challenge
  WordCamp Dhaka’s ticket sale caused the central WordCamp site to crash and display “sold out” due to massive simultaneous requests. Md Shahjahan, an organizer from WordCamp Sylhet, shared his technical analysis, noting the unique, massive demand in Bangladesh that overwhelmed the low-traffic multisite infrastructure. He suggested organizers use a dedicated, separate server for any subsequent ticket batches to manage the load and prevent overselling. (Source)
• Melapress 2025 Security Survey: 64% Have Been Breached
  The newly published Melapress 2025 WordPress Security Survey reveals that 64% of WordPress professionals have suffered a full security breach. While the average security concern is high (7.8/10), the survey highlights a major gap in preparation: only 27% of respondents have a breach recovery plan in place, despite website availability and data theft being their top concerns. (Source)

✨ Fresh Features Rollout

1. WordPress 6.8.3 Security Release Fixes Key Vulnerabilities
   WordPress 6.8.3 is a recommended security release with two critical fixes. Users should update immediately. It patches a data exposure issue for authenticated users and an XSS vulnerability in nav menus. Fixes are backported to older branches. WordPress 6.9 is due December 2nd, 2025. (Source)
2. Gutenberg 21.7 Features Expanded Command Palette and New Blocks
   Gutenberg 21.7 features an expanded Command Palette, bringing site editor navigation everywhere. It introduces the experimental Terms Query Block for categories/tags. Other updates include contentOnly treatment for unsynced patterns to prevent accidental edits, and Block Commenting is now enabled for published posts. (Source)
3. Divi 5 Launches Dedicated Icon List Module
   Divi 5 introduces a dedicated Icon List Module to easily create stylish, structured lists using custom or library icons instead of plain bullets. The module offers extensive design customization, including individual item linking and leveraging Divi 5’s Flexbox system for precise spacing and layout control, making it ideal for showcasing features or processes. (Source)
4. Divi 5 Introduces The Inspector Tool for Bulk Editing
   Divi 5 has released “The Inspector,” a new tool inspired by Figma that aggregates and deduplicates all essential attributes (like colors, fonts, sizes, and presets) for an element and its children. This allows designers to quickly view and bulk-edit styles across multiple elements and even within presets simultaneously, dramatically speeding up the design workflow. (Source)
5. SiteKrafter Updates Divi 5 Framework with Improved Class-Based Design
   SiteKrafter released an update to its Divi 5 framework, greatly improving the class-based design experience. Users no longer need to memorize classes, as the CSS ID and Classes field now provides intelligent suggestions as they type for utility classes like centering, text sizing, margins, and for setting up a grid layout. The update also fixed conflicts, allowing users to seamlessly use a hybrid approach of class-based design alongside Divi Builder’s visual design settings. (Source)
6. Crocoblock Plugins Receive Major Updates in August Digest
   The August Crocoblock digest highlighted several key updates focused on dynamic content and booking functionality. JetEngine 3.7.4 added an Items Number Switcher external module and improved the Query Builder. JetBooking 3.8.3 introduced support for booking cancel URL macros and improved available/booked unit counts. JetMenu 2.4.14 added a Jet Cache module for database-backed template caching to improve mega menu performance. (Source)
7. WP Amelia 8.5 Adds Dynamic Pricing, Security, and Mailchimp Integration
   WP Amelia 8.5 enhances booking flexibility with the ability to set dynamic pricing rates based on the time of day and day of the week, with the calendar visually highlighting price changes. For improved security, the release adds Google reCAPTCHA support for both employee and customer login panels. Furthermore, a new Mailchimp integration allows seamless email collection and list growth directly from the booking form. (Source)
8. Elementor 3.32 and Pro v4 Bring Transform, Transitions, and Size Variables
   Elementor 3.32 introduces new professional motion controls as part of Editor V4 Alpha. New Transform controls let users visually move, scale, rotate, and skew elements in 3D space, while Transitions control how elements animate between states for smooth micro-interactions. Elementor Pro gains Size Variables for consistent spacing/sizing across sites and enhanced Classes management, including a tool to convert local styles into reusable Global Classes. (Source)
9. CyberChimps Adds Before/After Slider to Elementor Addons
   CyberChimps has released the Before After Image Slider widget for their Responsive Addons for Elementor. Ideal for showcasing dramatic changes (e.g., photo retouching, construction, or weight loss), the slider can be oriented horizontally or vertically and features customizable controls, including the handle design, alignment, and an option to trigger movement on hover. (Source)
10. FuseWP Expands Integrations with New Form and LMS Support
    FuseWP, a marketing automation plugin, recently added numerous integrations in its latest updates. New support includes popular form builders like Ninja Forms, Formidable Forms, Everest Forms, Fluent Forms, and Contact Form 7. The plugin also integrated with several LMS and membership solutions, including Sensei LMS, Masterstudy LMS, Academy LMS, and Paid Member Subscriptions. (Source)
11. FlowMattic WooCommerce 2.0 Revolutionizes E-commerce Automation
    FlowMattic WooCommerce 2.0 is a major update that introduces a host of new e-commerce automation features, positioning the platform as a comprehensive alternative to multiple premium extensions. Key additions include advanced cart abandonment recovery triggers and actions, intelligent inventory management for real-time stock alerts, and customer behavior intelligence triggers based on spending and purchase history. (Source)
12. FluentCommunity 1.8.0 Adds Following/Follower Module and Quiz Thumbnails
    FluentCommunity 1.8.0 enhances user connection with a new Following/Follower Module on user profiles, including follower notifications and a Block/Unblock feature. The update also improves course presentation by adding a Thumbnail Image option for the Quiz Section and introduces Email Notifications for Structured and Scheduled Courses. Additionally, it features a Default Feed Layout and an Image Upload option for Polls. (Source)
13. PublishPress Blocks Introduces Comprehensive Block Management Tools
    PublishPress Blocks has released a major update focused on providing a complete set of management tools for Gutenberg blocks. New features include Block Controls for managing visibility based on schedules, user roles, device types, and browser/OS. The update also adds a Block Styles feature with a Style Builder to easily create custom, reusable CSS styles for any block, and an Auto Insert Blocks tool to automatically place reusable blocks based on criteria like post type and position. (Source)
14. Toolset 1.6.21 Upgrades Maps with Marker Clustering and New Autocomplete
    Toolset 1.6.21 delivers two major mapping upgrades: Marker Clustering for OpenStreetMap to improve performance and readability of dense maps, and full support for Google’s New Autocomplete API for reliable search suggestions without complex configuration. The release also includes compatibility fixes for PHP 8.2 and corrections for date translations in dynamic fields. (Source)

🆕 Fresh Releases

1. SugarCart Launches as a Digital-First E-commerce Solution for WordPress
   This Stripe-built digital e-commerce plugin is for creators selling downloads/subscriptions. It features zero platform fees (keep 100% of sales), content restriction, and automatic global tax calculation via Stripe Tax, positioning it as a lightweight WooCommerce alternative. (Source)
2. Widget Supply Releases 144 New ‘Beautiful Widgets’ for Elementor
   Widget Supply is a massive collection of 144 highly-customizable widgets for Elementor. It emphasizes high-quality design, focusing on accessibility, SEO-friendliness, and excellent page speed. Offered as a one-time Lifetime Deal. (Source)
3. GroundWorx Launches Testimonial Plugin with Block Editor Focus and Schema Markup
   The Groundworx Testimonial plugin registers a dedicated CPT for testimonials, natively supporting the Block Editor. It provides a main block with SEO schema markup and individual field blocks. Testimonials can be displayed singly or in a Query Loop. (Source)
4. Tutor LMS Releases ‘Workademy’ Corporate & Team Learning Theme
   Workademy is a modern, responsive LMS theme for corporate training and e-learning platforms built on Tutor LMS. It offers full customization via the Droip visual editor (no coding) and features deep integration with Tutor LMS data for dynamic content and high learner engagement. (Source)
5. Creator LMS Launches as All-in-One Course Platform with 100% Revenue Retention
6. Creator LMS by WPFunnels/RexTheme is an all-in-one platform for courses and memberships, allowing users to keep 100% of revenue. Key features include an effortless course builder, seamless WooCommerce integration, Gamification, and an AI-Suite for content creation. (Source)

🗓️ Mark Your Calendar 

If you’re looking for opportunities to network and learn, check out these upcoming WordPress events and meetups:

• WordCamp Canada (October 16-17, 2025)
• WordCamp Islamabad (October 18–19, 2025)
• WordCamp Dhaka (October 18–19, 2025)
• WordCamp San Jose (October 31, 2025)
• WordCamp Kansai (November 1-2, 2025)
• WordCamp Athens (November 8, 2025)
• WordCamp Malaysia (December 6-7, 2025)
• WordCamp Nepal (Butwal, January 23-24, 2026)
• WordCamp Asia (Mumbai, April 9 – 11, 2026)
• WordCamp Europe (Poland, June 4-6, 2026)
• WordCamp US (Phoenix, 2026)

That’s a wrap for this week’s WPDigest! Stay tuned for more exciting WordPress updates next week.

Want to feature your WordPress product, service, or update news? Submit it for free using our form, helping spread the goodness of WordPress!

📩 Enjoyed this digest? Share it with your network!