Atto WP - Your Daily Pulse on WordPress, AI & Digital Innovation

The two-line WordPress 7.1.1 patch showing a theme slug wrapped in escapeSelector, above a diagram of a URL fragment flowing into a jQuery selector and a synthetic click

Click2Shell: How a jQuery Selector Became a Remote Shell in WordPress 7.1

WordPress 7.1.1 fixed Click2Shell with two lines: escape a theme slug before it reaches a jQuery selector. Why server-side validation did not help, why the selector failed silently instead of throwing, and how to find the same shape in your own plugin JavaScript.

Varun Dubey · September 19, 2026 · 13 min read

A PHP register_block_type call with supports autoRegister true beside the block editor sidebar controls it generates, labelled with the WordPress 7.1 change that passes the current post ID to the preview

Gutenberg & FSE

PHP-Only Blocks Can See the Current Post Now. What Still Needs React

WordPress 7.1 fixed the biggest limitation of PHP-only block registration: the editor preview now knows which post it is on. The exact rules core applies to autoRegister blocks, the failures that produce no error, and when you still need React.

Varun Dubey · September 17, 2026 · 13 min read

A timeline from an SVN tag at 09:00 through a six-hour WordPress.org security review to distribution at 15:00, with a blocked release branching off to an email to committers

Security & Performance

Your Plugin Release Now Waits Six Hours. Plan Around It.

Since 5 June every plugin and theme release on WordPress.org waits in a cooldown, currently six hours, while AI models and Jetpack Scan review it. High-risk releases are blocked automatically. What that changes for announcing, hotfixing and shipping security fixes.

Varun Dubey · September 17, 2026 · 13 min read

A five stage pipeline showing sanitisation on save, block validation, server render, REST preparation and the consumer, with four stages marked as reporting nothing and each labelled with what it removes

Gutenberg & FSE

Five Places WordPress Silently Rewrites Your Content

Content changes shape at five boundaries between save and render, and four of them report nothing. A map of what each one removes, plus a four-command diff harness that identifies the responsible boundary in a minute.

Varun Dubey · September 14, 2026 · 13 min read

Themes & Plugins

Best WordPress Video Community Plugins (2026)

MediaVerse leads our roundup of the best WordPress video community plugins for 2026, for creator communities that want a video-native feed they actually own.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best WordPress Q&A Plugins (2026)

Jetonomy leads our roundup of the best WordPress Q&A plugins for 2026, with Stack-Overflow-style questions, voting, and reputation built for self-hosted knowledge bases.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best WordPress Community Job Board Plugins (2026)

WP Career Board paired with BuddyNext leads our roundup of the best WordPress community job board plugins for 2026, turning job postings into a real member benefit tied to your existing community.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best WordPress Gaming Community Plugins (2026)

BuddyNext leads our roundup of the best WordPress gaming community plugins for 2026, paired with WB Gamification for leaderboards, badges, and tournament recognition.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best WordPress Photo Community Plugins (2026)

MediaVerse leads our roundup of the best WordPress photo community plugins for 2026, with album-first organization built for photography clubs and camera enthusiast groups.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best Free WordPress Community Plugins (2026)

BuddyNext leads our roundup of the best free WordPress community plugins for 2026, with an honest look at which tools are free-forever versus free-core with an optional paid tier.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best WordPress Community Directory Plugins (2026)

Listora leads our roundup of the best WordPress community directory plugins for 2026, built for chambers of commerce, HOAs, and associations listing member businesses.

Shashank Dubey · September 13, 2026 · 13 min read

Themes & Plugins

Best WordPress Help Desk Community Plugins (2026)

Jetonomy leads our roundup of the best WordPress help desk community plugins for 2026, letting customers answer customers while staff verify best answers and cut ticket volume.

Shashank Dubey · September 13, 2026 · 13 min read

Latest Posts

Click2Shell: How a jQuery Selector Became a Remote Shell in WordPress 7.1

PHP-Only Blocks Can See the Current Post Now. What Still Needs React

Your Plugin Release Now Waits Six Hours. Plan Around It.

Five Places WordPress Silently Rewrites Your Content

Best WordPress Video Community Plugins (2026)

Best WordPress Q&A Plugins (2026)

Best WordPress Community Job Board Plugins (2026)

Best WordPress Gaming Community Plugins (2026)

Best WordPress Photo Community Plugins (2026)

Best Free WordPress Community Plugins (2026)

Best WordPress Community Directory Plugins (2026)

Best WordPress Help Desk Community Plugins (2026)