WordPress 6.9.2 landed on March 11, 2026 with fixes for ten vulnerabilities, among them blind SSRF, a PoP chain in the HTML API and an XXE in getID3. What each one lets an attacker do, and how to ship the update with WP-CLI.
WordPress 7.0 Beta 3 ships 148 fixes and swaps the static AI provider list for the WP AI Client registry. Here is what changed in the connectors screen and how to test it on staging before the April 9 release.
A tool is one capability, a skill is the orchestration around it. Notes on writing agent skills in Python instead of Markdown, and where MCP fits when you build agents outside Claude.
RHF and Zod handle flat CRUD forms well, but branching logic leaks across the schema, the state and the JSX. Where SurveyJS keeps those rules instead, and how to pick between the two.
Machine learning at scale is an infrastructure problem before it is a modeling one: why availability beats accuracy, how label leakage fakes good metrics, and why heavy models and fallbacks belong on different hardware.
AI Experiments 0.4.0 puts prompt-based image generation in the Block Editor and the Media Library, and adds a Generate Review Notes pass for accessibility and readability. It also points at the WordPress AI rename in 0.5.0.
Running OpenClaw on bare metal, skipping the system prompt, and handing it admin API keys are the three setups that go wrong most. What to do instead, with a docker-compose file and a scoped IAM policy.
AI-generated code ships fast and then stalls, usually around month three, when nobody can safely change the file it all lives in. A WooCommerce example shows the monolith version next to the decoupled one.
Classic RAG runs one retrieval pass and stays predictable. Agentic RAG keeps searching until it has enough evidence, and pays for it in latency and tokens. How I pick between them, and what breaks when a loop has no budget.
WordPress is featuring eight plugins every two weeks, picked from those with under 10,000 installs and less than a year in the directory. What the criteria check, and the code cleanup worth doing first.