WordPress 7 Is Building an AI Platform. Here's What That Means, and What's Coming in 7.1.

We've been building AI directly into WordPress environments and custom applications for clients before WordPress had a native framework for it. For years, AI features in WordPress meant plugins. Each one built its own connection to an external AI provider, managed its own API keys, handled its own authentication, and operated independently of every other AI tool on the site. If you used three AI-powered plugins, you had three separate AI configurations to manage, three separate points of failure, and no consistent way for any of them to understand the WordPress context they were running in.

The WordPress Core RCE Vulnerability: Here's What We Found

WordPress vulnerabilities are a regular occurrence. Most of them live in plugins, affect specific configurations, or require some level of authentication to exploit. When our team flags something on a Friday night, that's usually the signal that something different is happening.

The Security Case for Static Sites: What 2026's WordPress Vulnerabilities Changed

We've been building on WordPress since 2004. It's our core practice, and for a significant majority of the organizations we work with, it's the right platform. But 2026 has been a year that makes the platform security question harder to dismiss than it used to be.