May 2025

22,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Motors WordPress Theme

TLDR: Wordfence reports a critical privilege escalation vulnerability in the Motors WordPress theme (versions ≤ 5.6.67) allowing unauthenticated attackers to reset passwords. Detected by researcher Foxyyy, the issue has been patched in version 5.6.68. Users are urged to update their sites. Wordfence provided firewall rules for protection, with free users receiving it on June 5, 2025.

https://www.wordfence.com/blog/2025/05/22000-wordpress-sites-affected-by-privilege-escalation-vulnerability-in-motors-wordpress-theme/

How to Create a Paid Newsletter in WordPress (Substack and Gumroad Alternative)

TLDR: Launch a paid newsletter using WordPress and Jetpack Growth for better control, subscriber ownership, and monetization options compared to platforms like Substack or Gumroad. WordPress offers customization, low fees, and integration capabilities. Jetpack Growth aids in managing newsletters, designing content with flexible blocks, increasing subscribers, and monetizing through ads and payment plans. Setup includes installing Jetpack Growth, enabling the newsletter feature, configuring subscription forms, and creating premium content. Other monetization strategies include tiered subscriptions, sponsored content, affiliate marketing, and selling products/services.

https://jetpack.com/resources/paid-newsletter-subscription-wordpress/

How to Change the Author of a Post in WordPress (5 Easy Ways)

Change WordPress post author easily via block editor, Quick Edit, bulk edit, plugins, or database. Update author profiles by editing user details, display names, or roles. Choose methods based on needs—manual for single, Quick Edit for fast edits, bulk for multiple, plugins for customization, and database for advanced users. Consider using Jetpack AI Assistant for enhanced content creation.

https://jetpack.com/resources/how-to-change-author-in-wordpress/

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 5, 2025 to May 11, 2025)

TL;DR: Wordfence released its 2024 WordPress security report highlighting 222 new vulnerabilities in plugins/themes last week, with 66 researchers contributing. Key offerings include free vulnerability data access and CLI scanner for regular checks. 132 vulnerabilities were patched, while 90 remained unpatched. Major vulnerabilities include cross-site scripting and CSRF. The report recognizes top researchers and lists plugins with vulnerabilities.

https://www.wordfence.com/blog/2025/05/wordfence-intelligence-weekly-wordpress-vulnerability-report-may-5-2025-to-may-11-2025/

10,000 WordPress Sites Affected by Remote Code Execution Vulnerability in UiPress Lite WordPress Plugin

📢 Wordfence's 2024 WordPress security report highlights evolving risks. A Remote Code Execution vulnerability in UiPress Lite (up to version 3.5.07) can allow attackers to execute arbitrary code, affecting over 10,000 sites. Discovered by researchers, it led to a patch (3.5.08) on May 13, 2025. Users are urged to update promptly. Wordfence Premium users received protection on March 31, with free users getting it on April 30. The vulnerability poses a significant risk; ensure your site is secure.

https://www.wordfence.com/blog/2025/05/10000-wordpress-sites-affected-by-remote-code-execution-vulnerability-in-uipress-lite-wordpress-plugin/

Building Accessible Websites With GeneratePress and GenerateBlocks 

Web accessibility ensures all users, including those with disabilities, can effectively navigate websites. In celebration of World Accessibility Day on May 15, 2025, we focus on creating inclusive and high-performing sites using GeneratePress and GenerateBlocks, which prioritize accessibility. Key principles include:

  1. Perceivable: Ensure content is accessible via senses (e.g., descriptive alt text for images, high-contrast colors).
  2. Operable: Make sites navigable through various input methods (e.g., keyboard navigation).
  3. Understandable: Use clear language and descriptive links for easier comprehension.
  4. Robust: Build with semantic HTML for compatibility with assistive technologies.

The release of GenerateBlocks 2.1 enhances accessibility features, simplifying ARIA label usage and improving dynamic content accessibility. Regular testing with assistive technologies is crucial to maintain a usable site. By integrating these practices, developers can create accessible websites that cater to all users.

https://generatepress.com/accessible-websites-generatepress-generateblocks/

How to Add Right-to-left (RTL) Support in WordPress

TLDR: Ensuring RTL language support in WordPress improves user experience for Arabic, Hebrew, and other RTL speakers. This guide covers checking theme compatibility, adding RTL support, testing, and maintaining RTL styling. Key steps include creating an RTL stylesheet, enqueueing it, modifying plugin styles if needed, translating content, and using tools like Jetpack AI Assistant for efficient content management. Regular updates and testing are vital for maintaining functionality.

https://jetpack.com/resources/wordpress-rtl/

Scroll to Top