Digest 125: King Addons Flaw Under Attack

This week we cover the WordPress 6.9 launch and its AI roadmap. Urgent news includes a critical King Addons security flaw. Key releases feature WooCommerce 10.4 pre-updates, and new plugins: WriteRush AI content, OpinionCamp block polls, and SEO Rank Hunter rank tracking.

---

Zero Compromise Hosting: 20i Delivers Peak WordPress Performance

Tired of slowdowns? Instantly eliminate downtime with our True Autoscaling Cloud that proactively absorbs traffic spikes. Accelerate every site load using High-Frequency CPUs for record-breaking processing speed and enjoy global coverage with Unlimited Edge Pre-Caching CDN. Migration is seamless, downtime is zero.

See the difference – First month only $1

---

↑ Brought to you with support from these partners

💡 WordPress Spotlight

• State of the Word 2025: Live 6.9 Release & AI Future Roadmap
  Matt Mullenweg delivered the annual State of the Word keynote, which culminated in the first-ever live, on-stage release of WordPress 6.9. The address focused heavily on the future of AI within the platform, announcing the new Abilities API and the MCP adapter to enable predictable interaction with AI systems. Mullenweg also highlighted that WordPress now powers over 43% of the web and celebrated the growth of the project’s 60,000+ plugin directory. (Source)
• WordCamp Europe 2026 Website is Live: Heading to Kraków
  The official website for WordCamp Europe 2026 has been launched, confirming the dates and location for the major event. The largest WordPress community event in Europe will take place from June 4–6, 2026, in Kraków, Poland. The venue is the state-of-the-art ICE Krakow Congress Center. While the site is currently focused on general information, attendees are encouraged to subscribe for updates as the Call for Speakers, Call for Sponsors, and ticket sales will be opening soon. (Source)
• Community Remix Exposes AI’s Accessibility Blind Spot
  A lightning-fast, community-driven plugin remix using tools like Telex AI highlighted a major development lesson: while AI is fast, the initial code was critically lacking in accessibility, relying on non-semantic tags. The event necessitated a real-time rebuild by Equalize Digital experts, underscoring the vital need for human developers to prioritize semantic HTML and ARIA standards over raw AI output. (Source)
• WordPress Core Declares AI a “Fundamental” Component
  The Make WordPress Core team announced a major strategic shift: AI must become a fundamental component of WordPress, akin to the database. The vision aims to unlock ecosystem innovation by allowing all developers to assume a capable AI model is present. This is driven by the upcoming WP AI Client (proposed for WordPress 7.0), which simplifies AI access, with hosting providers expected to integrate AI models into their managed plans eventually. (Source)
• 20i Overhauls My20i with Custom Widgets
  Hosting platform 20i announced the biggest change ever to its My20i control panel with the launch of new modular widgets. Users can now fully customize their dashboard with widgets for Account Usage, Package Resources, Mailbox Limits, and Security Event History, providing a personalized, at-a-glance overview of their most relevant information. (Source)
• WordPress 7.0 Development Underway, Slated for 2026
  Work has officially begun on WordPress 7.0, which will be the first major release of 2026. The Alpha phase started on November 12, 2025, opening the trunk for new features deemed “reasonably ready.” The Core team is currently focused on development before the tentative Beta and Release Candidate phases commence next year. (Source)
• WordCamp Asia 2026 Opens “Call for Wapuu” Design
  WordCamp Asia 2026, set for Mumbai, India, has opened its “Call for Wapuu Designs” contest. The team is inviting designers and fans to create a Mumbai-inspired Wapuu that celebrates the city’s energy, culture, and iconic landmarks. The submission deadline for the official event mascot design is January 15, 2026. (Source)
• Deep Dive into WordPress 6.9 Features
  The WordPress 6.9 release introduces major workflow and editing enhancements. Key updates include the site-wide Command Palette (Cmd/Ctrl+K) for fast navigation and block actions, new collaboration features like Notes for block-level comments and Hide Blocks for content testing. Developers also gained several new core blocks, notably a native Accordion block, plus dedicated blocks for Terms Query, Math, and Time to Read. (Source)
• Critical Flaw in King Addons Under Active Attack
  A critical privilege escalation flaw (CVE-2025-8489, CVSS 9.8) in the King Addons for Elementor plugin (10,000+ active installs) is under active exploitation. The flaw allows unauthenticated attackers to grant themselves administrative privileges during user registration. Users running versions 24.12.92 through 51.1.14 must update immediately to the patched version 51.1.35 or later. (Source)
• Kinsta Launches SAML SSO for Agencies
  Kinsta has rolled out SAML Single Sign-On (SSO) integration for its MyKinsta dashboard, specifically targeting agencies and enterprises. This new feature centralizes identity management, enhances security by delegating authentication to Identity Providers (IdPs) (like Okta or Microsoft Entra ID), and streamlines team onboarding with automated Just-in-Time (JIT) provisioning. (Source)
• Yotako Launches WPMaven.ai, an All-in-One WordPress Copilot
  Yotako (creator of Figma to WordPress) has launched WPMaven.ai, an AI-powered “WordPress Copilot” designed for owners and agencies. The tool centralizes site management, enabling users to launch entire websites, generate content, automate plugin management, and handle security updates using simple natural language prompts. (Source)
• SureRank Announces Introductory Price Drop on Pro
  SureRank is offering special introductory pricing on its Pro and Business SEO plans. The Pro Annual plan for up to 10 sites is marked down from $149 to $99/year. All paid plans include AI-powered features, such as Automatic SEO Fixes, AI Internal Linking, and AI Meta Tag Generation, all with no extra API fees or separate charges for OpenAI. (Source)
• Performance Playbook: Remkus de Vries on Real Bottlenecks
  In a Melapress Show episode, performance expert Remkus de Vries shared a “Performance Playbook” for WordPress. He detailed a framework for diagnosing speed issues beyond caching, pinpointing the true culprits in large sites: slow database queries, excessive autoloaded options, object cache misses, and poor architecture. The talk provides practical advice for developers and owners on plugin selection and key early project decisions that ensure long-term speed. (Source)
• FluentCart Launches Earlybird Lifetime Deal for Performance eCommerce
  FluentCart, the new high-performance, open-source eCommerce plugin, is currently offering an Earlybird Lifetime Deal starting at $249 for a limited time. Engineered for speed and scalability, FluentCart is built to handle physical and digital products, subscriptions, and licenses, with its architecture designed to keep order processing fast and server resource usage low. (Source)

✨ Fresh Features Rollout

1. WebinarIgnition: High-Converting Webinars with WooCommerce Integration
   The WebinarIgnition plugin allows users to run live, automated, and evergreen webinars directly within WordPress. Its key feature is the ability to sell WooCommerce products via an embedded checkout inside the webinar room, eliminating redirects and external platforms and turning the store into a full webinar funnel engine. (Source)
2. Gutenberg 22.2 Introduces Embed Videos in Cover Blocks
   Gutenberg 22.2 was released with key improvements for builders and developers. Notable updates include the Cover block now supporting embedded videos (YouTube/Vimeo) as backgrounds, eliminating the need for local file uploads. Theme developers can now style Button block pseudo-states (hover, focus) directly in theme.json, and the experimental Breadcrumbs block received numerous handling enhancements for better context awareness. (Source)
3. Dokan Multivendor 4.2.1 Focuses on API Expansion and Vendor Management
   Dokan 4.2.1 introduces major API updates, adding new endpoints for Store Support (allowing customers to create/view tickets and vendors to respond) and RMA (Return Merchandise Authorization) to fetch details and submit new requests. For vendor management, new order filters were added for Product Advertisement and Subscription orders. Crucially, a fix was implemented for the Booking module to prevent failed transactions from leaving resources stuck in an unavailable status. (Source)
4. WooCommerce 10.4: Pre-release Updates Summary
   WooCommerce 10.4 (Dec 9, 2025) enhances performance and blocks. It enables the high-performance Interactivity API Mini Cart by default and improves accessibility. Block features now include Add to Cart variation support and Featured blocks supporting inner blocks for customization. Developer improvements include standardizing HPOS Datastore caching and boosting REST API speed by lazy loading admin namespaces (reducing TTFB by 30-60ms). (Source)
5. Bit Integrations – Version 2.7.3
   This version introduced new Trigger and Action events for MailerPress (7 new triggers, 6 new actions) and a New Feature for the Salesforce (Pro) integration, adding the ability to update existing leads for smoother CRM maintenance. The update also included several Fixes: resolving issues with WooCommerce (customer recognition and unauthorized product review validation), correcting phone number handling in Salesforce, and fixing a bug in the Divi Form (Divi Engine – Pro) where a specific form type returned a null value. (Source)
6. WP Staging Pro 6.3.2
   It is compatible up to WordPress 6.8.3 and introduced a new automatic login feature for staging sites. Fixes primarily addressed Pro issues, including resolving FTP/SFTP backup deletion errors, saving data in the clone edit modal, and correcting false ‘Insufficient Database Permissions’ warnings. (Source)
7. Spectra Releases Enhancements for WordPress 6.9 Compatibility
   Spectra has pushed out version 2.19.17, ensuring its blocks and features are fully compatible with the recently released WordPress 6.9. (Source)
8. WP Rocket 3.20.2 Maintenance & Performance Update
   This release focuses on stability and performance, notably by optimizing the preloading mechanism for fonts (turning off RUCSS fonts preload by default) and adding an enhancement to ensure the Cache Lifespan setting also purges the Cloudflare APO cache, improving synchronization between the two services. (Source)
9. Brizy Focuses on Editor Stability & Dynamic Content
   The updates introduce performance improvements like retaining the value of the Input Text element when the toolbar closes instantly. They also include fixes for dynamic content, ensuring correct color and style application for text linked to dynamic sources. The release enhances overall editor stability and cleans up old JavaScript code for leaner performance. (Source)

🆕 Fresh Releases

• WriteRush: AI Content Assistant for WordPress
  WriteRush is an all-in-one AI content plugin that integrates directly into the WordPress dashboard to replace the entire content workflow. It creates high-converting, brand-aligned content by offering Topic Analysis, a Brand Voice Module, AI-powered Outlines (based on SERP data), integrated Image Generation, and One-Click Publishing with social media post creation. (Source)
• OpinionCamp: New Block-Based Poll Plugin OpinionCamp
  It is a newly introduced, modern block-based poll and survey plugin for WordPress. It is designed to leverage the native Gutenberg block editor, allowing users to create visually appealing and responsive polls and surveys using simple blocks for seamless integration and ease of use. (Source)
• SEO Rank Hunter: Free Rank Tracking SEO Rank Hunter
  SEO Rank is a free plugin that allows WordPress users to track their keyword rankings directly inside the dashboard. It helps monitor the performance and visibility trends of selected keywords, providing an efficient way to keep track of basic SEO rank checking without relying on external tools. (Source)
• NeedsPlugin FormShield: Anti-Spam NeedsPlugin FormShield
  It is an anti-spam solution focused on protecting form submissions across the WordPress site. It employs non-intrusive security measures, such as invisible CAPTCHA and Honeypot fields, to effectively block bot submissions and spam without complicated setup or degrading the user experience. (Source)

🗓️ Mark Your Calendar 

If you’re looking for opportunities to network and learn, check out these upcoming WordPress events and meetups:

• WordCamp Malaysia (December 6-7, 2025)
• WordCamp Bangkok (December 13-14, 2025)
• WordCamp Nepal (Butwal, January 23-24, 2026)
• WordCamp Zaragoza (January 24, 2026)
• WordCamp Kolhapur (January 31, 2026)
• WordCamp Pune (February 08, 2026)
• WordCamp Nice (March 06, 2026)
• WordCamp Asia (Mumbai, April 9 – 11, 2026)
• WordCamp Europe (Poland, June 4-6, 2026)
• WordCamp US (Phoenix, 2026)

That’s a wrap for this week’s WPDigest! Stay tuned for more exciting WordPress updates next week.

Want to feature your WordPress product, service, or update news? Submit it for free using our form, helping spread the goodness of WordPress!

📩 Enjoyed this digest? Share it with your network!