![\"\ud83d\ude09\"](\"https:\/\/i0.wp.com\/s.w.org\/images\/core\/emoji\/17.0.2\/72x72\/1f609.png?w=640&ssl=1\")
<\/p>\nHi there, <\/p>\n
It was another busy release week: the WordPress 7.0.3 security update, WordPress 7.1 RC 1, and Gutenberg 23.7 all landed. More on each below \u2014 but before you keep reading, update all your sites to 7.0.3 now. This newsletter can wait\u2026 <\/p>\n
If you are traveling to Phoenix: safe travels, and pack a sweater \u2014 the AC will be cranked up high in every building! This year, I will see you on the WCUS Livestream.<\/p>\n
Have a great weekend! <\/p>\n
Yours, WordPress 7.0.3<\/strong> <\/a>shipped as a security release fixing twelve vulnerabilities, so update your sites right away<\/strong> if automatic background updates aren\u2019t already handling it for you. Release lead John Blackbourn<\/strong> lists the fixes, including a pre-auth XSS on the login screen that could lead to PHP code execution, several contributor-level stored XSS issues, and a multisite privilege escalation. Backports reach all supported branches down to 4.7, and 7.1 RC2 carries the fixes too.<\/p>\n To appreciate the huge effort by the security team to get this release out, consider the numbers: until earlier this year, there were 20 to 30 reports per month; now that number has jumped to 450 per month. Both security updates, 7.0.2 and 7.0.3, were backported not only to the two officially supported versions, 6.9 and 7.0, but all the way back to version 4.7. That\u2019s two dozen major versions that needed updating. See also Rae Morey\u2019s<\/strong> story in The Repository: WordPress 7.0.3 Patches 12 Vulnerabilities as Bug Bounty Reports Climb to 450 a Month<\/strong><\/a>.<\/p>\n August 19 is the scheduled final release date, and Benjamin Zekavica<\/strong> announces WordPress 7.1 Release Candidate 1<\/strong><\/a> ready for your test sites. Since Beta 4, more than 145 updates landed \u2014 57 in the Editor, 88 in Core \u2014 plus new features like the Icons API, shareable revision links, and email notifications for @mentions in Notes. Plugin and theme authors: wrap up testing and bump your \u201cTested up to\u201d to 7.1. WordPress Playground lets you try it straight in the browser. <\/p>\n Milana Cap <\/strong>counts more than 310 Core Trac tickets, twenty new hooks, and roughly 600 Gutenberg enhancements in the WordPress 7.1 Field Guide<\/strong><\/a>, your linked index of every dev note for the August 19 release. Highlights range from client-side media processing and the always-iframed post editor to the SVG Icon API, responsive block styles, and the persistent admin bar. A candid closing section covers what didn\u2019t make it, from the Classic block\u2019s reprieve to real-time collaboration and React 19.<\/p>\n The post editor is always iframed in WordPress 7.1, and the escape hatch that let one apiVersion 2 block pull a whole post out of the iframe disappears. That\u2019s the compatibility risk topping the developer\u2019s audit list for WordPress 7.1<\/a> <\/strong>by release coordinator Benjamin Zekavica.<\/strong> He sorts each section by risk level, walks through the SVG Icon API\u2019s strict sanitizer, responsive block styles, and the new DataViews filters, and closes with a checklist for your August 19 release.<\/p>\n The Gallery block\u2019s ambiguous \u201cConvert to images\u201d button becomes \u201cDetach,\u201d complete with a modal explaining what happens \u2014 one of many refinements Jonathan Bossenger<\/strong> walks through in what\u2019s new in Gutenberg 23.7<\/a>. <\/strong>You\u2019ll also find the Global Styles inheritance UI now opt-in via the Experiments page, LaTeX errors in the Math block waiting until you leave the field, and fixes for floated blocks overlapping sticky ones and Pullquote line heights in the editor.<\/p>\n Variable product pages load roughly 9 to 12 percent faster and large stores get snappier Order screens, Brent MacKinnon<\/strong> reports in what\u2019s new in WooCommerce 11.0<\/a>.<\/strong> Analytics also grows more trustworthy: refunds now count in the period they happened, session counts exclude bots, and you can rerun incomplete historical imports. Guest customers can claim past orders when they create an account, and a Checkout Recovery beta lets you test messaging before a full rollout.<\/p>\n Getting Site Editor changes out of the database and into version control has frustrated agency developers for years, and Brian Coords<\/strong> argues agents make it urgent again. His experimental agent-first approach to Create Block Theme<\/strong><\/a>, wp-theme-control, wraps the upcoming WP-CLI 3.0 wp block commands in bash scripts and an agent skill: a plan command lists database changes, then you dry-run, export them into your theme, and optionally clear the database copies. He\u2019s collecting feedback ahead of his WordCamp US talk.<\/p>\n Clients pinning comments straight onto your live pages \u2014 no logins, no email chains, no PDF round-trips \u2014 is the pitch of Ben Elwood<\/strong>\u2018s Reviso client feedback and approvals<\/strong> plugin<\/a>. Among other page builders it\u2019s native to the block editor, with threaded replies, status tracking, and review links that work even in maintenance mode. Version 1.5.2 switches on Suggest mode by default, so reviewers propose wording changes like tracked changes and your team applies them with one click.<\/p>\n Bas Buis <\/strong>released Dynamic OSM Maps, <\/a><\/strong>a plugin <\/strong>that adds interactive maps without Google API keys or recurring fees. The lightweight block runs on OpenStreetMap and Leaflet: in the free version you enter addresses manually, while Pro connects your custom fields \u2014 coordinates, addresses, or repeaters \u2014 for unlimited markers and popups. That opens the door for directory and listing sites to render stored location data straight onto the map.<\/p>\n Emily Rapport<\/strong> opens with Dutch tulip mania to frame the rush of llms.txt files and AI-visibility subscriptions, then does something rarer: shares a year of her own content work with real Search Console data<\/strong><\/a>. Her rewritten maintenance page climbed from position 50 to 13 and collected exactly five clicks \u2014 yet three inquiries arrived saying \u201cI asked ChatGPT.\u201d Her takeaway: publishing consistently across real topics beats chasing one niche, and you still can\u2019t reliably trace an AI recommendation to a page.<\/p>\n \u201cKeeping up with Gutenberg \u2013 Index 2026\u201d<\/a> <\/strong> The previous years are also available: The WooCommerce Developer Blog follows up its All Products proof of concept with the why behind it. Veronica Fasulo<\/strong> and co-authors lay out the value of DataViews and who it\u2019s for<\/strong><\/a>: you describe a field once and it powers the list column, Quick Edit, bulk edit, and forms, instead of four hand-wired implementations. Merchants get switchable views without page reloads, extension developers get registration instead of DOM patching \u2014 and the team openly asks whether DataViews is even the right foundation.<\/p>\n A customizable Dock, auto-save, and live visual previews of your saved instances headline the new WordPress Playground UI<\/strong><\/a>, which Fellyph Cintra<\/strong> demos on WordPress.tv. The video walks through importing projects from GitHub or Zip files, previewing Core and Gutenberg pull requests, and the built-in file editor, database manager, and error logs \u2014 plus switching WordPress versions all the way back to 0.7. Feedback goes to the Make Playground blog<\/a> or the #playground<\/a> Slack channel.<\/p>\n Vercel, a major platform shipped the Vercel AI Gateway Provider<\/strong><\/a> plugin, by former Core AI team rep Felix Arntz.<\/strong> One API key unlocks hundreds of models from over 40 providers. Any AI Client plugin on your site can route text, image, and video generation through the Gateway \u2014 including the Photo to Post demo from Jonathan Bossenger\u2019s tutorial<\/a>. Automatic fallbacks kick in during provider outages, and you pay provider rates without platform fees.<\/p>\n Your AI agent designs a beautiful page, and Gutenberg freezes it into one uneditable Custom HTML blob. Human Made\u2019s answer is Block Runner, now open-sourced on GitHub<\/strong><\/a>: a deterministic Node CLI that converts generated HTML into properly nested native blocks \u2014 wp:cover, wp:columns, wp:buttons \u2014 with real attachment IDs, and validates every result against headless Gutenberg. In the team\u2019s benchmark, raw models writing block markup score 35 to 73; paired with Block Runner, the same models hit 93 to 99.<\/p>\n Readers may remember Chris Huber\u2019s Block Format Bridge<\/a> <\/strong>from a few months back \u2014 it tackles the same gap from inside WordPress, converting Markdown and HTML server-side at insert time, while Block Runner works the pipeline side with its validation gate and CI hooks. Two open-source answers to the same question is a good sign the agentic content problem is getting real attention. <\/p>\n A third piece of the puzzle: the official WordPress agent-skills repository<\/strong><\/a> takes the prevention route, teaching AI coding assistants to write valid block markup in the first place. For a lighter-weight approach, you can also point your AI agent straight at the updated Core Blocks Reference<\/a>,<\/strong> where each block\u2019s page now documents its markup, attributes, supports, and allowed nesting.<\/p>\n Need a plugin .zip from Gutenberg\u2019s master branch?<\/a><\/strong> Now also available via WordPress Playground<\/a>. There is no need for a test site locally or on a server. Have you been using it? Email me <\/a>with your experience.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n Questions? Suggestions? Ideas? <\/em> For questions to be answered on the Gutenberg Changelog<\/a>, ![\"\ud83d\udc95\"](\"https:\/\/i0.wp.com\/s.w.org\/images\/core\/emoji\/17.0.2\/72x72\/1f495.png?w=640&ssl=1\")
Birgit<\/em><\/p>\nDeveloping Gutenberg and WordPress<\/h2>\n
\n
\n
\n\n\n![\"\ud83c\udf99\"](\"https:\/\/i0.wp.com\/s.w.org\/images\/core\/emoji\/17.0.2\/72x72\/1f399.png?w=640&ssl=1\")
The latest episode is Gutenberg Changelog #133 \u2013 Gutenberg 23.6 Release and WordPress 7.1<\/a><\/p>\n![\"\"](\"https:\/\/i0.wp.com\/gutenbergtimes.com\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-31-at-13.13.07.png?resize=652%2C186&ssl=1\")
<\/figure>\n\n\n<\/div>\n<\/figure>\n<\/div>\n<\/div>\n<\/div>\nPlugins and Tools for #nocode site builders<\/h2>\n
\n
\n
\n
\n\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n\n\n\n
A chronological list of the WordPress Make Blog posts from various teams involved in Gutenberg development: Design, Theme Review Team, Core Editor, Core JS, Core CSS, Test, and Meta team from Jan. 2024 on. Updated by yours truly.\u2002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n
<\/strong>2020<\/a> | 2021<\/a><\/strong> | 2022<\/a><\/strong> | 2023<\/a><\/strong> | 2024<\/strong><\/a> | 2025<\/a><\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\nBuilding Blocks and Tools <\/h2>\n
What\u2019s new in Playground? <\/h2>\n
AI in WordPress <\/h2>\n
\n\n\n\n<\/div>\n<\/div>\n\n<\/div>\n\n\n\n\n\n
Gutenberg Times provides daily build for testing and review.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/gutenbergtimes.com\/wp-content\/uploads\/2024\/02\/Screenshot-2025-11-15-at-12.06.44.png?resize=196%2C45&ssl=1\")
<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n<\/div>\n<\/div>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
Don\u2019t hesitate to send them via email<\/a> or<\/em>
send me a message on WordPress Slack or Twitter @bph<\/em>.<\/p>\n
\n
send them to changelog@gutenbergtimes.com<\/a><\/p>\n\n\n\n\n
\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n