The Repository

We’re an independent news biz dedicated to reporting what’s happening in the WordPress ecosystem. Get our stories in your inbox:

[The Repository @therepositorywp]

PHP2Shell hasn't been publicly linked to a single hacked WordPress site. But it showed who gets warned, who everyone waits on, and how well hosts communicate with customers during a crisis.

🔗 https://t.co/fUOWYbWqNX

[The Repository @therepositorywp]

StoreAgent's free WooCommerce MCP connects the AI assistant you already use to your store, so it can check sales, sort out orders, and tell you what your shoppers are asking, writes creator Josh Kohlbach in this sponsored post.

🔗 https://t.co/nygdjas8Hs

[The Repository @therepositorywp]

"Simply hate fun"? A new WordPress 7.2 feature that sends visitors to a random post will be switched on by default. It's prompted developer backlash, a jab from Cloudflare's EmDash team, and pushback from Matt Mullenweg.

🔗 https://t.co/zbm4otlTa4

[The Repository @therepositorywp]

A big thank you to our sponsors @patchstackapp, @hostedby20i, @Pressable, @humanmadeltd, @wpengine, @metorikhq, @AwesomeMotive, @novamira_ai, @wanotifier & @weglot for supporting independent journalism in the WordPress space ✨

[The Repository @therepositorywp]

Out now: The Repository #326 🗞️

⚖️ Automattic, Mullenweg try to settle WP Engine customer class action
🔔 Notifications design takes cues from WordPress .com
📦 Nexcess goes all in on bundle & agencies
🤝 Awesome Motive buys Drip, Sleeknote

🔗 https://t.co/oXonA8HNSX

[The Repository @therepositorywp]

Six new experiments in AI 1.5.0 include tools that connect sites to AI agents and let AI-powered browsers edit posts, as the AI Team works toward building MCP into WordPress core.

🔗 https://t.co/YzY2UBbAZh

[The Repository @therepositorywp]

CEO Syed Balkhi says Awesome Motive buys businesses it already uses to make money. Now it owns Drip, the email platform behind WPBeginner, and its popup sister brand Sleeknote.

🔗 https://t.co/jfHD8vLprX

[The Repository @therepositorywp]

The first 'Voices of the Community' gathering will kick off in Vancouver during WordCamp Canada, and where the series goes next depends on which communities put their hands up.

🔗 https://t.co/cVSTfhG8BO

[The Repository @therepositorywp]

Beta 4 brings selective translation updates, a Visual Revisions fix, clearer focus styles in high contrast mode, an AI design guide for Ipsum, and Abilities API, DataViews, and REST API updates.

🔗 https://t.co/zJ0iBkRa0D

[The Repository @therepositorywp]

Bundle pricing starts at $350 a year as Nexcess shifts its focus to agencies, and the company says it's learned from the backlash to retiring StellarWP in May.

🔗 https://t.co/1lWnT2eHlG

[The Repository @therepositorywp]

Plugin updates across 40 sites from one chat, client self-service edits, and an approval log for every change. In this sponsored post, WPVibe founder John Turner shares how agencies are using AI.

🔗 https://t.co/l1UnpQROLH

[The Repository @therepositorywp]

The proposed design for the Feature Notifications project would provide a clear system for categorizing notices, pin critical alerts, and let users mute plugin promos.

🔗 https://t.co/8DDlPepUFV

[The Repository @therepositorywp]

@wpbuilds We're getting flooded by these types of emails, all written by AI. It's frustrating.

[The Repository @therepositorywp]

After cutting its backlog of unreviewed reports from 359 to double digits, the WordPress Security Team is testing AI tools to find vulnerabilities first, and wants to pay researchers more, not less.

🔗 https://t.co/aImDKzSkm0

[The Repository @therepositorywp]

Automattic wants two WP Engine customers' claims moved to private arbitration, while newly unsealed records show it offered agencies up to $10,000 to move their sites off WP Engine.

🔗 https://t.co/jBPpJ3ynP4

[The Repository @therepositorywp]

A big thank you to our sponsors @patchstackapp, @hostedby20i, @Pressable, @humanmadeltd, @wpengine, @metorikhq, @AwesomeMotive, @novamira_ai, @wanotifier & @weglot for supporting independent journalism in the WordPress space ✨

[The Repository @therepositorywp]

Out now: The Repository #325 🗞️

🤖 AI team plans agent-ready WordPress 7.3
🔒 WordPress 7.1.4 fixes 22 vulnerabilities
🛡️ Security team pursues 'perfect' releases
🎤 Futurist to keynote Enqueue in Sydney

Plus lots more news & our latest poll.

🔗 https://t.co/8dF7jYmqw2

[The Repository @therepositorywp]

VRML co-inventor Mark Pesce will open Enqueue on December 9 with a keynote on what AI agents mean for the open web, and for the WordPress developers who build on it.

🔗 https://t.co/R1uLeXJ1m2

[The Repository @therepositorywp]

From native MCP to OAuth sign-ins, Jason Adams wants users to connect any AI agent to their WordPress site without setting up plugins or Application Passwords, and he's looking for contributors to lead the work.

🔗 https://t.co/tKoaurUPFI

[The Repository @therepositorywp]

I connected my WordPress sites and hosting accounts to Claude via Novamira's free HQ app, ran health and security scans, and wrote up what I found, unwelcome surprise and all, in this sponsored post.

🔗 https://t.co/HbnjlMEiU7