Jetpack 16.1.3 Security Update Patches Import Flaw
Jetpack 16.1.3 fixes a critical deserialisation flaw in the Import feature that has been present since Jetpack 12.0. Patched versions exist for every branch, and most sites are auto-updating.
wordpress plugins
3 posts
LiteSpeed Cache Vulnerability CVE-2026-18978 Patched in 7.9
Sucuri's August roundup flags an unauthenticated stored XSS in LiteSpeed Cache, patched in 7.9 after affecting 7.8.1 and earlier. ElementsKit and MC4WP shipped fixes too.
Elementor 4.2 Ships Grid in the Atomic Editor, Angie Builds From a Prompt
Elementor 4.2.0 ships Grid for advanced row and column layouts in the Atomic Editor, and Angie now builds pages, design systems, forms and loops from a single prompt. Here is what changed and what it means for agencies.