Digest 126: WP 7.0 Planning Begins & Wordfence Bug Bounty Sees 53% Surge

This week, the future of WordPress took shape with major announcements: WP Core planning kicked off for version 7.0, focusing on ambitious real-time collaboration and a refreshed admin interface. Urgent news includes the launch of the centralized 2026 Global Partner Program to secure community funding worldwide, plus a deep dive into the 99%+ compatibility milestone achieved by WordPress Playground. Also included: key updates for ACF, SureCart, and the final call for WordCamp Asia speakers!

---

Zero Compromise Hosting: 20i Delivers Peak WordPress Performance

Tired of slowdowns? Instantly eliminate downtime with our True Autoscaling Cloud that proactively absorbs traffic spikes. Accelerate every site load using High-Frequency CPUs for record-breaking processing speed and enjoy global coverage with Unlimited Edge Pre-Caching CDN. Migration is seamless, downtime is zero.

See the difference – First month only $1

---

↑ Brought to you with support from these partners

💡 WordPress Spotlight

• Global Partnership Program Launched to Fund Worldwide Events
  The WordPress community announced the launch of the 2026 Global Partner Program, a new centralized initiative to fund local WordCamps and Meetups. The program replaces individual sponsorships, simplifying administration for major partners while ensuring predictable funding for local event organizers globally. The initiative is structured into three tiers: Global Leader ($180k), Regional Powerhouse ($110k), and Community Builder ($60k), each offering varying levels of year-round visibility and brand support. (Source)
• WP Monitor Dev: Essential Tool for Developers
  WP Monitor Dev (Query Monitor) is the developer tools panel for WordPress and WooCommerce. It enables comprehensive debugging of database queries, PHP errors, hooks, and actions. It is crucial for isolating performance issues by allowing users to narrow down output by plugin or theme, identifying poorly performing components, and offering detailed information on the environment and REST API calls. (Source)
• WordPress Playground Celebrates 99%+ Plugin Compatibility in 2025 Review
  The WordPress Playground team released its 2025 Year in Review, marking significant milestones. The most notable achievement is achieving 99%+ compatibility with the WordPress plugin directory. Other highlights include a major performance boost (42% faster load times with OpCache), the introduction of a new state-of-the-art MySQL-on-SQLite driver, and enhanced developer tooling, including XDebug support and a stable release of the Playground CLI. (Source)
• CloudFest Hackathon Recap & Focus on Open Sourc
  Carole Olinger shared updates and insights on the recent CloudFest Hackathon, the major open-source event that kicks off the CloudFest main conference. The hackathon, which focuses on real-time collaboration to solve pressing internet infrastructure issues, drew diverse participants, reinforcing the event’s commitment to creating positive change through technology and open source development. (Source)
• WP 7.0 Planning Kicks Off with Focus on Collaboration and Admin Refresh
  Planning for WordPress 7.0 has officially begun, outlining major goals for the 2026 release. Key features on the roadmap include exploring real-time collaboration functionality within the editor, a comprehensive Admin Refresh to modernize the dashboard’s look and feel (including a potentially new default color scheme), and significant iterations on the AI Client API and the Abilities API to solidify AI as a fundamental component of the platform. (Source)
• Community Team Rep Nominations Open for 2026 Term
  The Make WordPress Community team has opened nominations for the 2026 Community Team Representatives. The role is designed to ensure continuity and leadership, with Reps coordinating team meetings, setting annual goals, and communicating updates across the contributor groups. The nomination period is open until January 9, 2026. The voting period will follow, running from January 12 to January 30, 2026. (Source)
• Wordfence Bug Bounty Program Sees Massive Surge in Submissions
  The Wordfence Bug Bounty Program reported a significant increase in security research activity in its November 2025 Monthly Report. The program received 746 vulnerability submissions, marking a 53.5% increase from the previous month. The report highlighted top-tier bounties awarded for critical flaws, including an Unauthenticated Remote Code Execution in Advanced Custom Fields: Extended, underscoring the vital role the program plays in securing the WordPress ecosystem. (Source)
• The WP Minute Shares Daily Habits for Freelancer Success
  In a recent article, The WP Minute outlined key daily habits essential for transforming a freelance business and avoiding burnout. Top strategies include Single Tasking (avoiding constant switching), Developing Routines to reduce decision fatigue, setting one Top Priority for the next day, and Eliminating Distractions like checking email only twice per day. The advice emphasizes that consistent, small actions build lasting growth. (Source)
• (Final Call!) WordCamp Asia 2026 Speaker Deadline: 15 Dec
  The final, extended deadline for submitting session proposals for WordCamp Asia 2026 in Mumbai is Monday, December 15, 2025. Prospective speakers are encouraged to submit their talks on topics spanning Development, Business, Design & UX, Community, and the practical applications of AI before the submission window closes at 11:59 PM IST. (Source)

✨ Fresh Features Rollout

1. Advanced Custom Fields (ACF) 6.7 Introduces Inline Editing
   ACF version 6.7 rolled out a major feature enhancement: Inline Editing for ACF Blocks. This allows content editors to modify field data directly within the block preview on the canvas, eliminating the need to use the sidebar constantly. The update also boosts developer flexibility by allowing Flexible Content layouts to be renamed and disabled within the post editor. (Source)
2. Droip v2.5.2 Patches Critical Security Flaws
   Droip released version 2.5.2 to address several serious security issues. The update specifically patches critical vulnerabilities, including an Arbitrary File Upload flaw and an unauthenticated Arbitrary File Download/Deletion vulnerability, making immediate updates necessary for all users. (Source)
3. WPML 4.9 Beta Simplifies Custom Elementor Widget Translation
   WPML 4.9 Beta introduced a powerful new detection mechanism that simplifies the translation workflow for builders. The update now automatically recognizes content within custom Elementor widgets (even those from third-party themes or addons) and makes them translatable without requiring developers to create manual XML configuration files. (Source)
4. SureCart 3.17.0 Enhances Product Variant and Shipping Control
   SureCart 3.17.0 focused on giving e-commerce owners greater command over their product catalog and logistics. Key updates include providing Better Control Over Product Variants and implementing Smarter Shipping Rules for more nuanced and precise e-commerce management. (Source)
5. SureForms 2.1.0 Adds HubSpot, MailPoet, and WP Fusion Integrations
   SureForms 2.1.0 rolled out significant expansion of its connectivity with the addition of new native integrations for HubSpot, MailPoet, and WP Fusion. The update also improved email notifications to format multiple-choice options on separate lines and remove empty fields for cleaner delivery. (Source)
6. FlyWP Launches Security Scans for OpenLiteSpeed (OLS) Sites
   FlyWP expanded its security offering by adding full support for the Integrity Checker and Vulnerability Scanner to sites running on the OpenLiteSpeed (OLS) platform. This enhancement provides a crucial layer of security monitoring for users leveraging OLS for high-performance hosting. (Source)
7. Uncode Theme 2.10.4 Ensures WooCommerce 10.4.0 Compatibility
   The Uncode WordPress Theme released version 2.10.4 to ensure full compatibility with the recently released WooCommerce 10.4.0. The update also includes fixes for Sticky Scroll issues on WooCommerce pages, improves performance on Quick-View functions, and resolves scroll issues related to Popups and Quick-View when using Smoothscroll. (Source)
8. Starter Templates v4.4.44 Adds New AI Builder Controls
   Starter Templates updated to v4.4.44, introducing new user controls for its AI Builder. Users can now quickly switch teams or disconnect their AI plan directly from the Zip Plan info modal, streamlining the management of their AI-assisted site building setup. (Source)
9. Smart Food Ordering Plugin Gets Maintenance Update
   The Smart Food Ordering & Reservation Plugin (by ThemeWinter) released a maintenance update to address several critical areas, including fixes for WooCommerce compatibility issues, resolution of PHP deprecation warnings, and improvements to the logic for adding extra food items. (Source)
10. WP Advanced Search & Filter (ASE) 8.1.1 Updates
    Version 8.1.1 of the Admin and Site Enhancements (ASE) plugin, which includes advanced search and filter features, brings improvements to page builder compatibility. Pro users now have Elementor integration for the Relationship field in Custom Field Groups and a fix for taxonomy term custom fields not displaying in the Bricks builder Query Loop. The update also includes fixes for external URL redirection and ensures proper Envelope-From/Return-Path settings in Email Delivery, especially following changes in WordPress 6.9. (Source)

🆕 Fresh Releases

• Sugar Calendar Bookings: Simple Appointment Scheduling
  Sugar Calendar has introduced a powerful new addon: Bookings. This new feature provides a lightweight solution for accepting appointments directly within WordPress. Users can easily set up services, control availability, add forms via blocks or shortcodes, and accept payments via Stripe, simplifying appointment management for consultants, service providers, and agencies. (Source)
• Ebook Crafter Launches to Convert WordPress Content into PDFs
  A new plugin, Ebook Crafter, has launched to help creators easily transform existing WordPress content—including posts, pages, and custom post types—into professional, polished PDF eBooks. The tool allows users to curate and reorder content into chapters, providing a seamless way to repurpose evergreen material into high-value lead magnets or products ready for distribution or sale. (Source)
• MailerPress 1.1 Ships with Redesigned Dashboard and Custom Fields MailerPress
  The AI-Powered Emailing Plugin for WordPress, released a major update to version 1.1. The release centers on user experience (UX) and data management, introducing a completely redesigned dashboard and a new navigation mode for a smoother workflow. The update also includes support for custom fields in the contact manager and an optimized campaign creation process. (Source)
• New Utility Plugin: Form Finder for Ninja FormsForm Finder for Ninja Forms
  A new utility plugin (v1.0.0) designed to solve the common issue of locating embedded forms. The plugin scans every public post type to discover where Ninja Forms shortcodes, blocks, and widgets from popular page builders (like Elementor, Divi, and Beaver Builder) are used. It then presents these locations in a clean, accessible admin table, grouped by page, making form management significantly easier for site owners. (Source)

🗓️ Mark Your Calendar 

If you’re looking for opportunities to network and learn, check out these upcoming WordPress events and meetups:

• WordCamp Bhopal (December 20-21, 2025)
• WordCamp Nepal (Butwal, January 23-24, 2026)
• WordCamp Zaragoza (January 24, 2026)
• WordCamp Kolhapur (January 31, 2026)
• WordCamp Pune (February 08, 2026)
• WordPress DevDay (February 21, 2026)
• WordCamp Nice (March 06, 2026)
• WordCamp Asia (Mumbai, April 9 – 11, 2026)
• WordCamp Europe (Poland, June 4-6, 2026)
• WordCamp US (Phoenix, 2026)

That’s a wrap for this week’s WPDigest! Stay tuned for more exciting WordPress updates next week.

Want to feature your WordPress product, service, or update news? Submit it for free using our form, helping spread the goodness of WordPress!

📩 Enjoyed this digest? Share it with your network!