Category: Newsletter

The rejection has raised questions about contribution requirements and transparency in the WordPress ecosystem.

Oliver Sild, Patchstack’s CEO, received an unexpected email from WordCamp Central explaining that his company hadn’t contributed enough to WordPress Five for the Future to qualify as a sponsor. The decision particularly stings given Patchstack’s substantial role in WordPress security – they handled over 50% of all new vulnerability disclosures in the ecosystem last year alone.

The email shared by Patchstack CEO:

Felipe Santos from the WordPress Community Team informed Sild that WordCamp sponsorships are moving away from the first-come-first-serve model to emphasize “contributions and relationships” with WordPress. The email suggested Patchstack pledge to Five for the Future (5ftF), an initiative encouraging companies to contribute 5% of their resources to WordPress.

However, here’s where things get murky: neither WordCamp sponsorship rules nor WordCamp Europe 2025’s sponsor guidelines mention 5ftF pledges as a requirement. The only stated expectation is that sponsors support WordPress and its principles.

He also wrote in X: “There’s a lot more to list here, but I don’t think it’s necessary to make a point. I just find this very disappointing after a decade of working with WordPress and incredibly demotivating for our entire team who has been pouring their hearts into this mission…”

The numbers back up his frustration. In 2024, Patchstack:

– Managed 4,566 individual vulnerability disclosures

– Paid nearly $200,000 in bounties to security researchers

– Launched a free Vulnerability Disclosure Program platform for plugin developers

– Recently awarded the highest bounty in WordPress history ($14,400) for a critical vulnerability discovery

The community has rallied behind Patchstack, with many prominent figures expressing concern about the decision. Francesca Marano, Patchstack’s Head of Partnerships and former community team member, pointed out issues with transparency and reliance on potentially unreliable Five for the Future data.

WordPress co-founder Matt Mullenweg has acknowledged the situation in X, calling the rejection email “crappy” and promising to investigate.

This comes at an interesting time, as debates about contribution requirements have intensified following Mullenweg’s recent criticism of WP Engine’s WordPress contributions compared to Automattic’s.

The controversy raises broader questions about how the WordPress community measures and values different types of contributions. Should security work carry the same weight as code contributions? How transparent should sponsorship requirements be? As the community awaits further clarification from WordCamp Central, these questions remain at the forefront of the discussion.

—

@Nishat Shahriyar

WPMore is your weekly digest of WordPress news, controversies, and community insights. Have feedback or tips? Reply to this newsletter.

The WordPress ecosystem is buzzing with activity as we kick off 2025. From heated discussions about theme design to new tools launching, there’s plenty to digest. Let’s dive in.

The Great Theme Debate: Creativity vs. Accessibility

Nick Hamze sparked quite a controversy by calling for “weird and exciting” WordPress themes. His plea for breaking visual rules and injecting personality into WordPress design resonated with many who feel themes have become too formulaic.

However, accessibility experts quickly pointed out the potential pitfalls. Amber Hinds of Equalize Digital raised valid concerns, leading to a heated exchange with Matt Mullenweg that drew criticism from community members.

The debate highlighted the ongoing tension between innovative design and accessibility requirements.

Brian Gardner perhaps put it best: “I’m all for creative WordPress themes—whether bold and quirky or plain but practical. As far as I’m concerned, they should ALL be accessible.”

WordPress.org Services Back Online After Historic Break

For the first time ever, WordPress.org took a holiday break, pausing several services for two weeks. Alex Shiels from the Meta team has confirmed all services are now restored. Users can once again register accounts, submit plugins/themes, and handle plugin reviews.

The break sparked some interesting discussions, particularly when Joost de Valk raised concerns about WordCamp ticket purchases requiring WP.org accounts. The community adapted, and services are now fully operational with the familiar registration process intact.

Patchstack Opens Up API Access

Security provider Patchstack has made a bold move by offering complete API access to their platform for all Developer accounts. With over 100 endpoints available, this opens up exciting possibilities for automation and integration.

The timing is perfect for those looking to enhance their security workflows – new Developer plan customers can get 50% off for the first three months until January 8th, 2025. Whether you’re building custom security reports or integrating with SIEM tools, the possibilities are extensive.

New SEO Plugin Promises Simplicity

In a market crowded with feature-heavy SEO plugins, a simplified SEO tool has emerged. SEO for WordPress® launched with a refreshing focus on simplicity and transparency. The plugin aims to provide essential SEO functionality without the bloat and upsells that have become common in this space.

Looking Ahead: WordPress in 2025

David McCan has shared his predictions for WordPress in 2025, acknowledging the ups and downs of 2024 and anticipating significant changes ahead. Read the article here or watch the video below.

The timing couldn’t be better, as the WordPress ecosystem seems poised for transformation across multiple fronts – from theme design to security tools to SEO solutions.

The start of 2025 has already shown that WordPress continues to evolve and adapt. Whether it’s the push-pull between innovation and accessibility, the recognition that even open-source communities need breaks, or the emergence of new tools focused on simplicity, these developments reflect a maturing ecosystem grappling with complex challenges.

What are your thoughts on these developments? Share your perspective by replying to this newsletter or commenting.

Until next week,

WPMore

Welcome to the 2nd WPMore newsletter of 2024! We’ve got exciting updates from the WordPress ecosystem to share, from major developments in plugin submissions to community initiatives and upcoming events. Let’s dive in!

Plugin Check Phase 2: A Game-Changer for WordPress Plugin Development

The success of Plugin Check‘s first phase has been remarkable. The numbers speak for themselves: 41% fewer issues per approved plugin and a 138% increase in weekly plugin approvals. Most impressively, the average review wait time has plummeted from 37 weeks to just 9 weeks, even as submissions have nearly doubled.

Now, the Plugins Team is gearing up for Phase 2, which will expand beyond new submissions to include updates for existing plugins in the Directory. The upcoming phase brings several key improvements:

– Enhanced documentation and clearer messaging for each check

– A revamped UI for better user experience

– New conditional rule application system

– Experimental checks feature for beta testing

– Retroactive directory integration

If you’re a plugin developer who hasn’t tried Plugin Check yet, now’s the perfect time to integrate it into your workflow. The tool is available both as a WordPress plugin and a GitHub Action, making it flexible for different development setups.

Empowering Women in WordPress: International Women’s Day Initiative

The WordPress Community Team has announced an inspiring initiative for International Women’s Day 2024. Local WordPress communities worldwide are being encouraged to organize women-centric events that will serve as platforms for learning, networking, and inspiration.

These events will feature various formats, from hands-on workshops and inspiring talks to networking sessions and mentorship opportunities. To support organizers, WordCamp Community Support is offering stipends between $100-$500 USD based on location and typical meetup sizes. Apply through the Creative WordPress Events form.

The team is currently seeking volunteer designers to create:

– An event banner for community use

– A female-themed Wapuu sticker sheet

– A WordPress Women’s Day logo

If you would like to volunteer for the designing part, please comment on the official post!

WordCamps in India: A Strong Start to 2025

The Indian WordPress community is kicking off 2025 with three major WordCamps in January:

WordCamp Ahmedabad (Jan 3-4) returns for its fifth edition at AUDA Auditorium TODAY. The event features a contribution day, showcase opportunities, and sessions on digital marketing, accessibility, and AI. Their Uttarayan-inspired Wapuu perfectly captures the spirit of limitless possibilities in WordPress.

WordCamp Kolhapur (Jan 11-12) makes its debut at D.Y. Patil School of Engineering. While sponsorship slots and no-swag tickets are still available, they’re going fast.

WordCamp Kolkata (Jan 18) comes back for round three at Viveka Tirtha, offering dual tracks packed with sessions on eCommerce, translation, accessibility, and practical workshops on Gutenberg, WP-CLI, and headless WordPress.

These events showcase India’s vibrant WordPress community, with cities like Ahmedabad and Mumbai leading global engagement for in-person events according to recent WordPress Meetup trends.

—

That’s all for this week’s WPMore! If you found this newsletter helpful, feel free to share it with your WordPress friends and colleagues.

See you next week with more WordPress news and updates!

Dear WordPress enthusiasts,

Welcome to the first WPMore newsletter of 2025! We’ve got exciting updates from the WordPress community, particularly about WordCamp Europe 2025 in Basel. Let’s dive into what’s brewing in the WordPress world.

WordCamp Europe 2025: Your Ticket to WordPress Excellence

Basel, Switzerland is gearing up to host what might be the biggest WordCamp Europe yet. After the stellar success of WCEU 2024 in Torino with nearly 3,000 attendees, the 2025 edition is expected to welcome up to 4,500 WordPress enthusiasts from June 5-7.

Want in on the action? Tickets are now available in two flavors:

– The General admission ticket at €50 (a steal for what you get!)

– The Micro-Sponsor ticket at €250 (perfect if you want to give back to the community)

Both tickets include access to all sessions, Contributor Day, lunch, coffee breaks, and the legendary After Party. Speaking of Contributor Day, while it’s included, you’ll need to register separately – it’s worth marking your calendar for June 5th.

Pro tip: You’ll need a WordPress.org account to purchase tickets. If you’re planning to bring your team, remember each person needs their own ticket, and you can easily transfer ownership through the confirmation email link.

A First for Europe: The WCEU Diversity Scholarship

Here’s something that makes me particularly proud of our community: WCEU 2025 is introducing its first-ever Diversity Scholarship program. Previously successful at WordCamp Asia, this initiative is now crossing continents thanks to the collaborative efforts of WordPress Community Support PBC and Queeromattic.

The scholarship is a game-changer for active WordPress contributors who:

– Haven’t experienced a flagship WordCamp before

– Need financial support to attend

– Represent underserved groups in open-source

– Are passionate about growing their local WordPress community

The package covers travel to Basel, accommodation, and event tickets. Applications are open until January 31st, 2025 – I’d strongly encourage eligible community members to apply.

T-Shirt Alert: Size Matters!

For those planning ahead, you’ve got until May 8th, 2025, to choose your t-shirt size. WCEU offers sizes from XS to 4XL in standard fit, with detailed measurements available. Don’t wait until the last minute – picking the right size now means one less thing to worry about later.

That’s all for this issue of WPMore! Got questions about WordCamp Europe 2025 or planning to attend? Drop me a line – I’d love to hear your thoughts.

See you in Basel!

Best,

WPMore

P.S. Remember, tickets are refundable until May 19th, 2025, but why would you want to miss this?

The WordPress ecosystem is evolving, and this week brings exciting news from Vancouver-based developer Duane Storey. Remember Duane? He’s the mind behind one of WordPress’s #1 plugins (later acquired by a Canadian investment firm) and has now launched an alternative WordPress repository at notwp.org.

Why This Matters

The WordPress.org repository has been the de facto standard for plugin distribution for years. But what if developers want options? What if they need more control over their distribution channels? This is where Storey’s new project comes in.

Inside the Not WP Repository

The repository consists of three main components:

Juniper/Author: A management plugin that automatically detects and submits Github-hosted plugins to the repository. It’s particularly noteworthy for its security features – including cryptographic signing of releases to prevent supply-chain attacks (something that could have prevented issues like the recent Advanced Custom Fields incident).

Juniper/Server: The backbone of the repository, generating static HTML files every ten minutes. It includes SHA256 hash verification for plugin downloads – a practical security measure that lets users verify their downloads haven’t been tampered with.

For more technical details please read the in-detail post Duane Storey wrote in his blog.

Decentralization by Design

Perhaps the most intriguing aspect is the built-in mirroring support. Using a simple configuration file, anyone can set up a mirror of the repository. This means hosts like WP Engine could potentially run their own mirrors, and organizations could even set up private internal repositories.

As Storey puts it: “I’m not trying to consolidate power – I’m trying to distribute it.” If notwp.org were to disappear tomorrow, any mirror could take over with minimal disruption.

Looking Ahead

The project’s roadmap includes:

– Automating Github information updates

– Completing the code signing implementation

– Expanding Github data integration

– Building out author pages

– Creating a site-wide “Sponsor” page to highlight plugins seeking financial backing

Supporting Plugin Developers

A key focus of this initiative is creating more funding opportunities for plugin developers. The repository integrates with Github Sponsors, making it easier for users and corporations to support the developers whose work they rely on.

This aligns well with recent community movements, including the launch of the WP Community Collective, a non-profit focused on transparent budgeting in the WordPress ecosystem.

Editor’s Note

This development comes at an interesting time for WordPress. With discussions about future infrastructure planned for early 2025 (potentially hosted by Joost), Storey’s proof-of-concept demonstrates what’s possible when we think beyond traditional boundaries.

Whether you’re a plugin developer looking for alternative distribution channels or a WordPress enthusiast interested in the ecosystem’s evolution, the Not WP Repository is worth watching. You can explore it at notwp.org, and if you’re interested in supporting its development, look for the sponsor button on the main Juniper/Author page.

—

WPMore Team

WPMore is your weekly dive into the WordPress ecosystem. Have thoughts about the Not WP Repository? Drop us a line – we’d love to hear from you.

In what can only be described as an ill-timed attempt at humor, WordPress co-founder Matt Mullenweg took to Reddit on Christmas Day to seemingly make light of recent controversies. His post asking “What drama should I create in 2025?” and suggesting changes like “naming releases after Drake lyrics” instead of jazz musicians drew swift criticism from the WordPress community.

The response was particularly pointed given the ongoing tension surrounding Automattic’s recent actions against WP Engine. One Redditor, WillmanRacing, delivered a scathing response highlighting potential legal implications of recent events, specifically mentioning Sherman Act violations and the possibility of class-action lawsuits.

The community’s frustration was perhaps best captured by zirconst, an enterprise WooCommerce user processing over $1M in annual transactions: “Your recent actions have made me seriously consider whether another platform would be better, despite our heavy investment in your ecosystem,” they wrote. “If you can simply shut down a company’s access to wordpress.org at will, or demand a % of revenue, or take over a plugin repository – a plugin that we use – that introduces a lot of risk and uncertainty.”

Several community members expressed concern about Mullenweg’s approach to the situation. “My concern here is that you imply our ongoing concerns are a joke. Matt, this is actually really serious and this isn’t either funny or appropriate,” wrote brianozm.

The discussion spilled over onto X (formerly Twitter), where industry figures weighed in. Kellie, a prominent voice in the WordPress community, pointed out the inconsistency in trademark enforcement: “You either enforce trademark or you don’t. It’s not a matter of how big, little, PE backed, or insignificant you believe the company you allege is infringing. You have to defend equally.”

Takis Bouyouris offered a more philosophical take, comparing the situation to Gabriel García Márquez’s “The Autumn of the Patriarch” and suggesting this might be indicative of a leader becoming increasingly detached from their community.

As we head into 2025, this holiday drama underscores the growing tensions within the WordPress ecosystem, particularly regarding governance, trademark enforcement, and the relationship between Automattic, the WordPress Foundation, and the broader WordPress community.

Your trusted source for WordPress news and insights. Subscribe to WPMore for weekly updates on the WordPress ecosystem.

The Inc Magazine Story

Last week, Inc Magazine published an extensive profile of Matt Mullenweg, painting a picture of a leader whose control over WordPress has become increasingly controversial. The piece, written by David H. Freedman, details how in September, Mullenweg temporarily blocked WP Engine’s access to WordPress.org resources, affecting their customers’ ability to perform automatic updates.

The article portrays Mullenweg as someone whose leadership style has shifted from “benevolent dictator” to what some now view as more authoritarian control. It highlights his ownership of WordPress.org and his role in the WordPress Foundation, suggesting these give him outsized influence over the ecosystem.

Read the Inc. profile here.

Mullenweg Responds

However, there’s another side to this story. In a detailed blog post responding to the Inc piece, Mullenweg challenges numerous aspects of the reporting, pointing out what he claims are factual errors and mischaracterizations. He disputes Inc’s valuation figures, clarifies the WordPress Foundation’s structure, and provides context for decisions that the magazine portrayed as arbitrary or vindictive.

Key points of contention include:

– The true nature of the trademark dispute with WP Engine

– The actual number of affected websites (roughly 745,000 rather than 1.5 million)

– The WordPress Foundation’s governance structure

– The historical context of previous WordPress controversies

What This Means for the Community

This situation raises important questions about power dynamics in open-source software. While WordPress’s success has been built on community contribution and open collaboration, the current dispute highlights the complex relationship between commercial interests and open-source principles.

For WordPress users and developers, several practical considerations emerge:

– The stability of the WordPress ecosystem

– The relationship between commercial hosting providers and core WordPress resources

– The future of trademark enforcement in the WordPress space

– The balance between centralized leadership and community governance

Looking Forward

Despite the controversy, WordPress continues to grow its market share. The platform’s fundamentals remain strong, though this situation may lead to meaningful discussions about governance and the relationship between commercial entities and open-source projects.

The outcome of WP Engine’s lawsuit and any resulting changes to WordPress’s governance structure could reshape how open-source projects handle similar situations in the future. As this story develops, we’ll continue to monitor its implications for the broader WordPress community.

—

WPMore team.

Your thoughts? Share them with us in the comments below.

The WordPress ecosystem finds itself at a pivotal moment as prominent community figures call for fundamental changes in the project’s governance structure.

This week brought significant developments that could reshape WordPress’s future, starting with Joost de Valk’s public statement challenging the current leadership model.

De Valk, co-founder of Yoast SEO, published “Breaking the Status Quo,” arguing that WordPress needs to move beyond its current single-leader structure. His critique comes amid rising tensions following Matt Mullenweg’s temporary closure of WordPress.org registrations and the ongoing Automattic-WP Engine legal dispute.

“We, the WordPress community, need to decide if we’re ok being led by a single person who controls everything,” de Valk wrote, proposing a five-point plan for reform:

1. Establish a foundation-led board with diverse industry representation

2. Transfer WordPress.org and community assets to this foundation

3. Reform trademark handling to allow freer usage

4. Create transparent sponsorship programs

5. Form specialized teams with clear governance structures

Community Leaders Rally for Change

Karim Marucchi, CEO of Crowd Favorite, quickly backed de Valk’s proposal, emphasizing the need to protect WordPress’s ecosystem. Marucchi outlined five critical priorities:

– Securing the supply chain and modernization efforts

– Defining and creating shared community resources

– Developing WordPress as an “Open-Web Operating System”

– Fostering innovation through open source

– Leading in data privacy and accessibility

The proposal has gained support from notable figures including Brian Gardner, Tonya Mork, and Katie Keith.

However, some community members expressed skepticism, with Andrei Lupu questioning whether “switching from one person’s vision to multiple people fighting for influence” would benefit the project.

Mullenweg’s Response

Matt Mullenweg’s response was brief but clear. Commenting on de Valk’s post, he suggested implementing these ideas “under a name other than WordPress,” noting the impossibility of achieving the proposed changes within the current WordPress framework.

A Fork in the Road

Morten Rand-Hendriksen’s “After WordPress” presents two potential paths forward:

1. A reformed WordPress with distributed governance and Mullenweg in a visionary rather than managerial role

2. A community-led effort to build something new, learning from WordPress’s 20-year journey

What’s Next?

De Valk and Marucchi plan to convene with community leaders in January 2025 to chart a path forward. The immediate focus will be on establishing federated repositories to prevent single-point control over WordPress’s plugin ecosystem.

Personal Take

As someone who’s in WordPress for years, I feel like a watershed moment. The community faces crucial decisions about governance, innovation, and sustainability. While change often brings uncertainty, it also creates opportunities for growth and improvement.

—

WPMore Team

Did you find this newsletter valuable? Forward it to a friend who might enjoy it too.

🎄 WordPress.org Takes an Unprecedented Holiday Break

Matt Mullenweg just announced something we’ve never seen before: WordPress.org is hitting the pause button on several free services for the holidays. Think of it as WordPress’s version of hanging up the “Gone Fishing” sign.

What’s paused:

– New account registrations

– Plugin reviews

– New submissions to plugin, theme, and photo directories

Don’t worry—WordCamp ticket buyers can still create accounts thanks to a quick fix by Dion Hulse. And yes, WP Engine keeps full access (more drama on that front in Matt’s spicy blog post).

🎯 Numbers That’ll Make Your Head Spin

Cloudflare dropped their yearly radar report, and guess what? WordPress now powers 53% of top websites. Let that sink in.

Meanwhile, internet traffic jumped 17.2% this year. Not too shabby!

🏆 Community Spotlight: Meet WordPress Scholarship Winner

Big congratulations to Lena (Eleni) Stergatou, who just won the first-ever WordCamp Europe Kim Parsell Memorial Scholarship! Coming from Greece, Lena’s been wrangling code and spreading WordPress love since 2008. She’ll be joining us at WCEU 2025 in Basel, Switzerland.

Know about Kim Parsell

🛠 Gutenberg 19.9: The Last Update of 2024

The final Gutenberg release of the year is here with some neat tricks up its sleeve:

– Style Book now works with classic themes

– New Query Total block for better user experience

– phpMyAdmin in wp-env (developers, rejoice!)

– Fresh features for featured images in Cover blocks

– Easier homepage settings right in the Site Editor

Read the full changelog here.

Looking Ahead

While WordPress.org takes a breather, the community keeps moving forward. Matt hopes to restore services “sometime in the new year,” but the timing remains as mysterious as PHP’s type system.

Keep building great things,

The WPMore Team

—

Got a WordPress story to share? Drop us a line!

Want weekly updates? Hit that subscribe button ⚡

🍍 Pineapple Gate: The Checkbox Saga Concludes

Remember that quirky pineapple pizza checkbox on WordPress.org? Well, the people have spoken. After 81.2% of users voted against making it mandatory (and 58.3% boldly declared pineapple doesn’t belong on pizza), it’s now optional.

The change came after Mika Epstein filed a Trac ticket, and Matt Mullenweg quickly backed the move. Some community members, like Patricia BT, suggested replacing it with something more professional – perhaps a Code of Conduct acknowledgment.

One Reddit user gave

the checkbox a proper sendoff:

“The Pineapple is dead! Long live the Pineapple!”

🌎 Breaking Barriers: Support Inclusion in Tech Goes Continental

Good news for WordPress enthusiasts in the Americas! Support Inclusion in Tech (SiNC) is expanding its reach. Founded by Winstina Hughes, the program now offers $240 grants to help underrepresented groups participate in WordPress events across Europe, Asia, Africa, and now North and South America.

Mark your calendars:

– January 2025: Public directory opens

– March 2025: Grant selections begin

– Four grants available per region

🏢 The People’s Voice: WP Community Collective Gets Official

Big moves from the WP Community Collective! They’ve officially incorporated as a California nonprofit, with Sé Reed at the helm as President & CEO. Their mission? Give the WordPress community a proper seat at the table.

Source: @sereedmedia

What’s cooking:

– 501(c)(6) status pending

– $5 minimum membership

– New Slack workspace for members

– Business tiers coming in 2025

– Charitable subsidiary in the works

Despite a hiccup with their fiscal host earlier this year, WPCC is pushing forward with plans for accessibility and DEIB initiatives.

What’s Next?

The WordPress community keeps evolving. From silly checkboxes to serious inclusion efforts, it’s clear that change comes in all shapes and sizes. Stay tuned as these stories develop.

Keep building,

The WPMore Team

—

Love what you’re reading? Share it with a friend!