Digest 122: Automattic Takes Legal Action

This week, we cover the serious Account Takeover flaw in the popular Post SMTP plugin. Also in the Spotlight: WordPress 6.9 Release Candidate 1 is out, and Automattic is in a trademark dispute with Automatic.css. Our Fresh Releases section introduces the new WPChat live assistant and an AI Image Alt Text Generator. Don’t forget: Black Friday/Cyber Monday deals are officially live for the biggest savings of the year!

---

20i – Peak performance WordPress hosting, no compromises

Tired of slowdowns? Instantly eliminate downtime with our True Autoscaling Cloud that proactively absorbs traffic spikes. Accelerate every site load using High-Frequency CPUs for record-breaking processing speed and enjoy global coverage with Unlimited Edge Pre-Caching CDN. Migration is seamless, downtime is zero.

Test the difference today for just $1

---

↑ Brought to you with support from these partners

💡 WordPress Spotlight

• WordPress 6.9 Enables Theme.json Styling for Forms
  WordPress 6.9 introduces theme.json support for styling specific form elements, making it easier for block theme developers to ensure aesthetic consistency globally. This initial release focuses on text inputs and select dropdowns, allowing for customization of borders, colors, spacing, and shadows via the styles.elements property. (Source)
  
• WordCamp Asia 2026 Launches Invited Speakers Program
  WordCamp Asia 2026 has announced its “Invited Speakers Program,” running parallel to the standard Call for Speakers. The goal is to enrich the event’s lineup by curating distinguished, diverse experts, particularly engaging prominent voices from outside the immediate WordPress community to bring fresh, innovative insights. Community members are encouraged to submit speaker and topic recommendations by December 7, 2025. (Source)
• Jamie Marsland Highlights New Blueprint-Driven Build Flow
  WordPress influencer Jamie Marsland is demonstrating a powerful new workflow for site building using WordPress Playground Blueprints. This flow involves choosing a Community Blueprint, customizing it within WordPress Studio (an Automattic/Playground tool), and then syncing the finished build to a live WordPress.com site. This signals a future where repeatable, pre-configured site setups are the new standard for fast deployment and testing. (Source)
• Automattic Sends Cease-and-Desist to Automatic.css Creator
  The creator of the popular CSS framework Automatic.css received a cease-and-desist letter from Automattic, alleging trademark infringement. Automattic claims the name “Automatic” (one ‘t’) is confusingly similar and phonetically identical to their registered “Automattic” trademark, requesting the framework be rebranded to prevent consumer confusion. (Source)
• PHP 8.5 Introduces Pipe Operator, New Functions, and Deprecations
  PHP 8.5, scheduled for release on November 20, 2025, brings several significant updates. Key new features include the Pipe Operator (|>), new functions for retrieving error and exception handlers (get_exception_handler, get_error_handler), and utility functions like array_first and array_last. Major deprecations include all MHASH_* constants, non-canonical scalar type casts (e.g., (boolean)), and returning non-string values or emitting output from custom output buffer handlers. (Source)
• Kinsta to Attend Web Summit Lisbon 2025
  Kinsta has announced its attendance at Web Summit in Lisbon, running from November 10–13, 2025. The company will be at Booth E311 to engage with attendees, partners, and community members. Their team will be available to discuss Managed Hosting for WordPress, performance, scalability, and developer workflows, offering an opportunity for attendees to connect and pick up Kinsta swag. (Source)
• Guide to Efficient WordPress Management with WP-CLI
  WordPress.com published a guide on using WP-CLI (WordPress Command Line Interface), the terminal-based tool that allows for highly efficient management of sites. WP-CLI enables bulk actions (like installing multiple plugins or updating database strings) and essential troubleshooting when the standard WP Admin is inaccessible. (Source)
• WordPress 6.9 Release Candidate 1 Milestone
  WordPress 6.9 is scheduled to hit Release Candidate 1 (RC1) today, November 11, 2025. The milestone marks a crucial stage in the development cycle, signaling a hard string freeze (no new translatable strings accepted) and the branching for the final release. Key tasks for RC1 include publishing the Field Guide, committing the “About” page content, and beginning to draft the official release post. (Source)
• Plugin Check Tool Adds Automatic Security Reports
  The Plugin Check tool, used by the WordPress Plugin Review team, has been updated to automatically generate Security Reports. When a plugin is submitted for review or a new version is uploaded, the tool now scans the code and automatically generates a detailed security report based on checks against common vulnerabilities, significantly streamlining the security review process. (Source)
• Stripe Link Hits 200M Users, Boosting WordPress Conversions
  Stripe’s one-click checkout feature, Link, has reached over 200 million users globally. This is major news for WordPress businesses using Stripe, as Link allows buyers to securely save their payment and shipping info once and check out instantly on any site powered by Stripe. This massively reduces friction at checkout, leading to higher conversion rates for WordPress and WooCommerce stores. (Source)
• Easy Digital Downloads Launches Official Elementor Integration
  EDD has released an official integration for the Elementor page builder. The new integration includes dedicated EDD widgets and deep styling controls, enabling users to easily design and customize every aspect of their digital product sales pages, checkout forms, and user dashboards directly within the Elementor interface, enhancing the storefront’s visual appeal and functionality. (Source)
• WPForms Adds Camera Field for Live Photo Uploads
  WPForms has documented how to use their new Camera Field feature, allowing users filling out a WordPress form (via desktop or mobile) to instantly capture and upload a photo using their device’s camera. This eliminates the need for manual file selection, improving workflows for job applications, identity verification, and submitting support tickets. (Source)
• Kinsta Ends Charges for Bot Traffic on Managed Hosting
  Kinsta, a managed WordPress host, has implemented a new policy to stop charging customers for bot traffic, which often accounts for a significant portion of site traffic but offers no business value. This move aims to provide fairer pricing and better value, as only human traffic that contributes to plan usage limits will be counted. (Source)
• Post SMTP Account Takeover Vulnerability Disclosed
  A vulnerability in the widely-used Post SMTP plugin (400,000+ installs) allows for Account Takeover via Email Log Disclosure. This critical flaw allows attackers to access sensitive email logs, which can contain password reset links, enabling an unauthenticated user to take control of an administrative account. Users must update the plugin immediately. (Source)
• WordCamp Asia 2026 Releases Second Ticket Batch
  The second batch of 600 passes for WordCamp Asia 2026 will be released on November 11, 2025, following the rapid sell-out of the first batch in just 55 minutes. Micro Sponsor Passes will also be made available in this drop. (Source)

✨ Fresh Features Rollout

1. Dynamic Visibility for Elementor v6.0.0 Refined with New Features
   Dynamic Visibility for Elementor has launched version 6.0.0, which refines its adaptive design capabilities. The free plugin update introduces quality-of-life features like a “Deselect All Triggers” button, compatibility for JS Events with anchor links, and a new PHP filter for trigger lists. The update also includes enhanced IP detection to ensure accurate condition checks even with CDN or proxy setups. (Source)
2. Directorist Directory Plugin Launches v8.5 with Builder Enhancements
   Directorist has released version 8.5, focusing on flexibility, SEO, and developer tools. Key updates include a refreshed, more intuitive New-Look Builder for creating and customizing directories, REST API v2 for better data control and mobile app support, and Taxonomy Migration to use native WordPress taxonomy archives for better SEO compatibility and cleaner URLs. (Source)
3. aDirectory 3.0.0 Introduces Multi Post Type Directory System
   aDirectory 3.0.0, the most flexible version of the directory plugin, is here, headlined by the Multi Post Type Directory System. This feature allows users to build independent directories (e.g., Jobs, Events) with unique post types and layouts within a single plugin instance. The update also includes dedicated search widgets, enhanced speed, and automatic expired listing management. (Source)
4. SureCart v3.16.3 Increases Product Variant Limit to 300
   SureCart has released version 3.16.3, which primarily increases the maximum allowed Product Variants per product to 300 (up from the previous limit). The update also addresses several fixes, including resolving an issue with Elementor form selection when only the free version is installed, correcting an error in the product list shortcode, and ensuring manual payment methods appear correctly on the customer dashboard. (Source)
5. Droip 2.5.0 Debuts Multi Post Type Directory System
   Droip has launched version 2.5.0 of its page builder, introducing the powerful Multi Post Type Directory System. This key feature allows users to create several independent directories (e.g., jobs, events, listings) within one plugin instance, each with its own dedicated post type and layout. The update also adds dedicated search widgets, improved third-party theme compatibility, enhanced speed, and automatic expired listing management. (Source)
6. WPCafe 3.0 Refreshes Food Ordering & Reservation System
   ThemeWinter updated its WPCafe plugin to version 3.0, introducing a major system overhaul for managing restaurant operations. This release focuses on efficiency with a new, intuitive dashboard for real-time order/reservation tracking, a streamlined one-click setup, and expanded Multi-Location Support to manage individual branches. New customer-facing features include a cleaner food menu design, built-in QR Code generation for dine-in guests, and a simplified add-ons system to easily customize orders. (Source)
7. Astra v4.11.14 Focuses on Accessibility & UI Fixes
   Astra v4.11.14, a new maintenance release, improves accessibility and user experience. The update features Enhanced Accessibility for the “Skip to Content” link for keyboard users. Key fixes include restoring all Google Fonts weights in the Customizer, resolving a broken color picker in the Blog Archive metabox, and fixing WooCommerce quantity buttons for “sold individually” products. (Source)

🆕 Fresh Releases

• YSLeadGen: New Popup and Form Builder Plugin
  YSLeadGen is a new WordPress popup and form builder designed for high-conversion lead capture. It features a Drag & Drop Editor, 50+ templates, and advanced triggers like Exit Intent and Countdown Timers. It is lightweight and compatible with major builders. (Source)
• Coupon Countdown Timer Plugin Launched
  Coupon Countdown Timer boosts sales by creating urgency using live countdowns and coupons inside popups, sticky bars, or floating boxes. It features a drag-and-drop builder, templates, and full WooCommerce compatibility. (Source)
• WS Image Alt Text Generator: AI for SEO & Accessibility
  The WS Image Alt Text Generator plugin uses advanced AI to automatically generate accurate, descriptive alt text for images. Key features include one-click generation from the media library, bulk processing for multiple images, and automatic alt text creation on upload. This tool is designed to save time, improve accessibility for screen readers, and boost SEO by providing search engines with relevant image descriptions. (Source)
• WPChat: Live Chat Assistant Launched by Smash Balloon
  WPChat is a new, affordable live chat assistant for WordPress that connects sites to customer messaging apps like WhatsApp, Messenger, Instagram, and Telegram. It features an AI-powered Smart FAQ for 24/7 instant replies and Chat Funnels to guide visitors toward conversions. (Source)

🗓️ Mark Your Calendar 

If you’re looking for opportunities to network and learn, check out these upcoming WordPress events and meetups:

• WordCamp Wroclaw (November 15-16, 2025)
• WordCamp Surat (November 16, 2025)
• WordCamp Netherlands (November 27-28, 2025)
• WordCamp Brasil (November 28-29, 2025)
• WordCamp Bangkok (December 13-14, 2025)
• WordCamp Malaysia (December 6-7, 2025)
• WordCamp Nepal (Butwal, January 23-24, 2026)
• WordCamp Asia (Mumbai, April 9 – 11, 2026)
• WordCamp Europe (Poland, June 4-6, 2026)
• WordCamp US (Phoenix, 2026)

That’s a wrap for this week’s WPDigest! Stay tuned for more exciting WordPress updates next week.

Want to feature your WordPress product, service, or update news? Submit it for free using our form, helping spread the goodness of WordPress!

📩 Enjoyed this digest? Share it with your network!