mailwal

WP Weekly 313 - Critical - MCP in WP Core, Thank WP People, Woo Accessibility

The WP Weekly
WP Weekly 313 / Critical

Critical PHP vulnerabilities kept the web on edge, including the WordPress world. MCP is coming to WordPress core, and WordPress 7.2 Beta 1 is ready for testing. Plus, loads of new plugins, AI updates in products, and Equalize Digital’s accessibility work on WooCommerce extensions.

The WP Awards 2026 – Voting is open now – over 200 people already voted, get your vote in! Supported by WPManageNinja (Enter Fluent ecosystem that powers up over 1 million websites), & Infinite Uploads (Faster Sites, Lower Costs, and WordPress Media That Runs Itself). Also, by Crocoblock, WinRocket, and WPO365.

FluentCart combines performance, flexibility, and control in one powerful WordPress eCommerce plugin. Easily sell physical or digital products, hybrid product listings, subscriptions, memberships, and more.

Universally allows you to easily translate your WordPress site into any language within minutes, so you can benefit from multilingual SEO & grow your traffic. It seamlessly integrates with popular SEO plugins, WooCommerce, and more.

WP Engine Newsroom: Designed specifically for media organizations publishing at scale, learn how WP Engine Newsroom simplifies publishing with fewer tools, connected workflows, and performance insights.

Easy MCP AI turns your WordPress site into a secure MCP server, so Claude, ChatGPT or Cursor can write, publish and update on the site itself, with no service in the middle. Free and open source, with per-token permissions.

↑ Community Sponsors supporting this weekly

What’s Buzzing in WordPress 💖
  • Maintenance Art + Thank WordPress… Dan Knauss has launched the Maintenance Art project, ‘For the people who keep WordPress and open source running’. This project aims to make that work visible and asks you to back the people who do it. It encourages you to thank, help, and give to maintainers, making WordPress possible.
  • FluentCart + Lifetime Ending… the team at FluentCart will stop offering the FluentCart Lifetime Deal from October 30, 2026. This is the last chance to grab lifetime deal, with either of 3 available plans: 1 website ($249), 5 websites ($499), and 15 websites ($799).
  • WPBruiser + New Home… WPZOOM is now the maintainer of the WPBruiser plugin, the anti-spam plugin that stops bots without a CAPTCHA. “After years without an update, the plugin is back in the WordPress.org directory, rebuilt and safe again, with a stack of new features in the free version and the return of WPBruiser Pro”.
  • HostlessWP + CloudFlare… Jane shared the HostlessWP tool, an open source command-line tool that moves an existing WordPress site onto Cloudflare Workers with one command, npx hostlesswp. PHP 8.3 runs inside the Worker as WebAssembly, the site keeps its own MySQL database, reached through Cloudflare Hyperdrive, and the media library goes to R2 or any S3-compatible bucket. WordPress core, the theme, and the plugins are not modified.
New Woo Plugins from: StackWC & AmazingPlugins

Woo + 3 New Plugins… the team at StackWC has released 3 new plugins in the WooCommerce Marketplace. First, Bulk Cleanup to delete old orders, expired sessions, spam reviews, unused coupons, and inactive users. Second, Checkout Contributions to add an optional contribution at checkout, such as a donation or a small tip. Third, Bulk Search & Replace to update aword, a URL or a price across hundreds of products, categories, or orders.

AmazingPlugins + For Woo… a house of plugins for WooCommerce, AmazingPlugins feature small, sharp, free tools for real store problems. It has WooCommerce plugins like: WooCommerce Accessibility Fixer, AP Shipping Rules Tester for WooCommerce, and Stale Order Cleaner for WooCommerce.

New Woo Plugins: Packing, Warranty, Duplicate, Renewal

BoxIntellect + Box Packing Dimensions… Mihai Matei shared the BoxIntellect plugin, AI Box Packing & Package Dimensions for WooCommerce, in the repository (free version). It helps figure out exactly which boxes every order ships in, with functionality of setting up your boxes, filling in missing dimensions with AI, and the parcels of every order.

EU Warranty Ready + Warranty Info… Aldo Escudero shared the EU Warranty Ready for WooCommerce plugin. The free version plugin helps stores identify products with missing warranty information and display the official EU legal guarantee notice and eligible GARAN labels on product pages, at checkout, and in customer order emails. It runs inside WordPress without an external account.

Merchlint + Duplicate SKU… Grzegorz Chrypliwy shared the Merchlint Duplicate SKU and GTIN Finder for WooCommerce, available in the repository. This plugin checks for duplicate SKU and GTIN in your products catalog powered by WooCommerce. It also checks for products with no GTIN, UPC, EAN or ISBN.

QuixWP + Renewal Scheduler… Alexandru Burdulea shared the QuixWP Renewal Scheduler for WooCommerce Subscriptions plugin. It allows store owners to schedule subscription renewals on specific calendar dates rather than relying solely on customers’ signup dates.

Event Plugins: WP Super Events, SeriesKeeper, & Staff

WP Super Events + New Plugin… Harmeek shared the new WP Super Events plugin, which brings event calendars, registrations, and ticketing together on a WordPress site. The free plan includes unlimited free bookings. Paid plans add Stripe payments, recurring events, Zoom meetings and webinars, automated reminders, and custom widget styling – handy for anyone running workshops, classes, or community events.

SeriesKeeper + Events Calendar Addon… Sanja Malovic is releasing SeriesKeeper, a small add-on for the free The Events Calendar for sites leaving Events Calendar Pro before Nexcess bundle renewals start on 16 Nov 2026. It adds recurring rules, one-click duplicate, and a beta import of existing Pro dates with Undo. Pre-orders open soon: planned $49 for the first year (1 site), delivery target 15 Nov 2026.

Staff Commission + Amelia… Yury Sviridov shared the o_OKak Staff Commission plugin in the repository for Amelia booking plugin users. It turns completed Amelia appointments into a monthly compensation report. Set one dated percentage per provider, choose full price or price excluding tax, and Lite shows work, revenue, compensation, and Ready, Partial, or Pending coverage.

New: ScrollStrike, AssistCamp, ZenQori, Edminboost

ScrollStrike + Callout Card… Vineet Kumar shared the new ScrollStrike plugin that automatically highlights affiliate links with an eye-catching callout card the moment readers scroll them into view. It promises to help bloggers and creators increase affiliate click-through rates without relying on disruptive popups.

AssistCamp + Documentation… Istiak Rayhan from the DotCamp Team shared the newly released AssistCamp plugin in the repository. It allows you to build documentation sites inside WordPress and come with support for both Full Site Editing (FSE) and classic themes – also, has 11 purpose-built blocks.

ZenQori Content Assistant + Chat Widget… Stanislaw Chalupczak shared the ZenQori Content Assistant, with a free version in the repository. It adds an AI chat widget that answers visitors’ questions strictly from your own content: WooCommerce products, pages, posts, and more.

Edminboost + Custom Dashboard… the Edminboost plugin in the repository allows you to customize the WordPress admin panel Layout, color themes, and menu (hide/reorder), and open important links in a drawer from the right sidebar by clicking the top bar icons. This lets users supercharge admin navigation.

More New: AskMyPages, Satelo, Tedrix, Seonix, Onsite

AskMyPages + AI Search & Chat… Nirmal Khanal shared the AskMyPages AI Search & Chat plugin, available in the plugins repository. It adds semantic search to the existing WordPress search box and an optional chat assistant. Answers draw on site pages and text-based PDFs, with direct citations to the source page or PDF page. The search box and results page stay in the site’s theme.

Satelo + Cross-Promotion… Anton Kirienko shared the newly released Satelo – Cross-Promotion & Guest Post Exchange plugin in the repository. It helps connect owners of WP websites to the Satelo network, where websites promote each other.

Tedrix + SEO Autopilot… Teddy shared the Tedrix SEO Autopilot plugin that promises to take over the weekly SEO work on a site’s pages. It reads Google Search Console and finds pages losing clicks. It writes fixes in the site’s own voice, like new titles and descriptions. It also flags what holds pages back in AI answers.

Seonix + SEO Autopilot… Pavlo Fedotov shared the Seonix SEO plugin in the repository for llms .txt, IndexNow, and AI Search Visibility (GEO/AEO). It allows you to connect a WordPress site to Seonix, an AI SEO autopilot. Then SEO articles researched and written by Seonix are published to the site on a schedule.

Onsite Link Verdict + Broken Links… the new Onsite Link Verdict plugin in the repository checks the links and images in your whole WordPress site (posts, pages, custom post types and comments) and tells you which ones are dead.

Extended WordPress Buzz 🔥
  1. PHP Mayhem… started with reports of “two critical vulnerabilities, both rated CVSS v4.0 9.2.” This resulted in a focus on security of web powered by PHP and a few brands even taking their websites offline. However, Mark Maunder from Wordfence shared this (Links X), “we’re protecting over 5 million PHP/WP sites. You know the deal. If it’s exploitable, we all see site cleanings. We’re seeing attack attempts in our telemetry. But we’re not seeing a single compromised site”.
  2. MCP in WordPress Core… Model Context Protocol (MCP) will soon become part of the core WordPress experience. Jeffrey Paul shared more, “This week’s meeting focused on a significant step toward making Model Context Protocol (MCP) a native part of the WordPress experience, following approval to move forward with the initiative. Contributors discussed how MCP should be delivered, early agent benchmarking results, authentication and security…”.
  3. WooCommerce MCP Adaptor… from 11.3v update, WooCommerce core product and order abilities will be enabled by default, and will require the WordPress MCP Adapter plugin active on your store to establish an MCP connection. Check what is being removed and how it affects developers using this functionality.
  4. WordPress Contributor Toolkit Redesigned… Ryan Welcher shared about the 2.0.0v of the WordPress Contributor Toolkit. This release comes with a new interface built on the WordPress Design System, a settings dialog, a dark theme, and translations into ten languages. The Core and Gutenberg workflows work the same way as in 1.2v.
  5. WordPress Credits Sponsorship… Isotta Peira shared about the WordPress Credits opening sponsorship tiers for supporting this endeavor. There are four paid sponsorship plans: Supporter ($5,000), Backer ($10,000), Champion ($15,000), and Partner ($30,000+). Also, an additional Friend plan for in-kind support.
Core WordPress Buzz

WordPress 7.2 Beta 1 is now available for download and testing, with final WordPress 7.2 scheduled for release on December 8, 2026. This features: responsive design controls, text shadow support, easier navigation management, better collaboration with notes, more efficient media uploads, new “On This Day” dashboard widget, improved global styles, and more.

Updates: FlowMattic, Classic Monks, & CraftForms

FlowMattic + Cloud… Nitin Yawalkar shared about the launch of FlowMattic Cloud, an optional add-on with a Free plan. This powers three services from one account: the Scheduler, Cloud Webhooks, and FlowMattic Tables. Each service stays off until you turn it on, and without Cloud, FlowMattic works exactly as it always has.

Classic Monks + New Features… 2.5.0v update has added 20 new features like maintenance mode and coming soon page, rollback for plugins and themes, a password policy, required two-factor login by role, and login CAPTCHA.

CraftForms + Catalog Search… 2.1v brings Catalog Search feature, where visitors pick dates & guests, then can see which of your rooms, boats, treatments or tickets are free. Each result links straight to its booking form with the dates filled in.

More Updates: Independent Analytics & SureContact

Independent Analytics + Campaign Builder… 2.16.0v has introduced a new Campaign Builder with a QR code generator. The redesigned Campaign Builder promises easier usage and navigation. In addition to a new QR generator, filtering, and the option to export your campaign links to a CSV.

SureContact + Profile Fields… the latest update brings the ability to Show, Hide and Reorder Profile Fields. Like you can choose which standard fields appear on contacts, companies, and deals, and in what order. Also, company and deal custom fields can now be grouped into sections and reordered.

Quick Bits
AI Stuff: Woo, Notifal, Rank Bix SEO, WPMaven, Markdown

Export Orders for Woo + AI Exports… Imaginate Solutions has released a major update to its Export Orders for WooCommerce plugin, introducing native Model Context Protocol (MCP) support that lets store owners connect ChatGPT and Claude directly to their WooCommerce stores. The update also introduces an AI Export Assistant within WordPress, OAuth-based authentication for secure AI connections, WordPress Abilities API integration, and improved export workflows.

Notifal + AI Generation… 3.0v brings deep integration with AI, as it analyzes a site’s niche, audience, design, and colors, then suggests 10 to 14 popups, floating bars, and floating side boxes aimed at sales, lead capture, and conversion rate. The user picks the ones they want, the AI designs them, and they go live on the site.

Rank Bix SEO + AI Module… 1.2.4v has added a new module for AI Content which promises to write complete, SEO-ready draft posts with your own AI key, one at a time or on a schedule. Also, the AI content queue enables you to queue up to 50 keywords at a time and Rank Bix creates one draft per interval (every 15 minutes up to once a week) in the background with WordPress cron.

WPMaven + RTL Languages… WPMaven, the first AI Business Creator and Manager for WordPress, announced it now supports businesses in Right to Left languages, including their local currencies – for: Hebrew, Arabic, Persian or Urdu.

LLM Markdown + Markdown previews… 1.1.0v by Michael Sablone to the free LLM Markdown plugin has added in-editor Markdown previews, per-post exclusions, extraction diagnostics, expanded SEO integration, and HTTP discovery headers.

Equalize Digital: WooCommerce Extensions Accessibility

The team at Equalize Digital partnered with WooCommerce, wherein 43 extensions were audited for accessibility barriers. “519 accessibility issues identified that failed 32 WCAG success criteria. 41 plugins maintained by WooCommerce, Automattic, or Fueled remediated for WCAG conformance”.

“2 plugins maintained by outside vendors had issues reported upstream. 41 Accessibility Conformance Reports published (for all WooCommerce/Automattic maintained plugins).

Novamira is a free, open-source WordPress plugin that connects Claude, Codex, Cursor (or any other AI agents) to your site, with PHP execution, database queries, and file operations. Available now at novamira.aiDoubleScale is the modular, all-in-one CRM for WordPress: multi channel marketing, sales pipelines, invoicing, booking, helpdesk and projects in one plugin. Turn on only what you need. Early-bird LTD: 20% Off until Nov 14.

WPVibe.ai allows you to safely manage your WordPress site with Claude, ChatGPT, Cursor, or any other AI agent. Use our deep integrations with popular plugins including Elementor, WooCommerce, and more. Try for free at WPVibe.aiSEOPress is the WordPress SEO plugin for people who manage more than one site: full white label, one-click migration from Yoast & Rank Math. Bulk AI generation of titles, meta descriptions, & image alt text. One license, unlimited sites.

↑ Community Sponsors supporting this weekly

WordPress Deals
Upcoming Events

Flagship WordCamps
April 09 - 11, 2027: WordCamp Asia 2027, Penang, Malaysia.
May 27 - 29, 2027: WordCamp Europe 2027, Málaga, Spain.
Not yet announced: WordCamp US 2027.

Online Events for WordPress
November 2-6, 2026: Page Builder Summit 9.0, online event for WP users.

Offline Events for WordPress
October 27, 2026: PressConf EU 2026, in Barcelona, Spain.
October 30, 2026: WordCamp Brazil 2026, Belo Horizonte, MG.
November 11, 2026: CloudFest Americas, in Miami, Florida, USA.
November 12, 2026: CMS Conf 2026, Gdynia, Poland.
December 09, 2026: Enqueue 2026, Sydney, Australia.

Upcoming WordCamps
November 05, 2026: WordCamp Canada 2026, Vancouver, Canada.
Novemeber 06, 2026: WordCamp Manchester 2026, Manchester, UK.
November 12, 2026: WordCamp Netherlands 2026, Netherlands.
November 13, 2026: WordCamp Pisa 2026, Pisa, Italy.
November 21, 2026: WordCamp Bengaluru 2026, Bengaluru, India.

Use the Submit Form to feature your WordPress product / service news - it's free, with the mission of spreading WordPress goodness. Connect on Social platforms: Twitter (X), Facebook, LinkedIn, & Bluesky.

New Here? Click Here to get the next issue of WP Weekly. Some content may contain affiliate & sponsored links, see disclosure.

Davinder Singh Kainth

ByDavinder Singh KainthA creative who Loves to Create Online Spaces powered by WordPress.

Twitter / Facebook / LinkedIn

The WP Weekly

1056/60, Mohali, India

You have received this email because you signed up at TheWPWeekly.com - if not, you may unsubscribe.