WP Includes is a new initiative that launched this week with the goal of improving equal representation of women at global WordPress companies. It was founded by Human Made COO Siobhan McKeown and XWP Director of Engineering Francesco Marano.
“I’ve been in WordPress a long time and I’ve met a lot of talented women but not enough in leadership roles. It’s time to change that,” McKeown said.
The website states the founders’ mission in launching the initiative:
Disappointed by the lack of representation of women in leadership roles at companies in the WordPress ecosystem we’ve decided to do something about it.
We want to drastically increase representation of women in leadership roles at WordPress companies. We will do this by mentoring and supporting women to take the next step in their careers.
WP Includes is recruiting women leaders who are C-Level or Directors at a WordPress company to volunteer as mentors and build a supportive network of mentees.
The mentorship program lasts five months and calls for mentees/mentors goes out twice a year in September and March. Mentors commit to meet with mentees for a 1:1 on a regular basis and support them in achieving their goals. Mentee applicants are required to be working at a business in the WordPress ecosystem and actively developing their careers.
WP Includes is accepting sponsorships from companies with some rigorous requirements:
Acknowledge gender disparity and a lack of representation in your organization, wherever it exists.
Proactively address gender disparity in your leadership and executive roles.
When senior roles become available, actively seek to place women within those roles.
Support women within their career in your organization, working to ensure that any gender-related barriers are removed.
Create opportunities to showcase women leaders in your organisation so that they can act as role models for future leaders.
Supporting organizations can also contribute by sharing open roles within the network and by providing mentorship to future leaders who may potentially be considered for leadership roles in the sponsoring organizations. This is effectively changing representation from the inside out with cooperating organizations contributing to the cultivation of the leaders they need in order to purse more diverse leadership teams.
Prospective mentees, mentors, and sponsors can apply on the WP Includes website.
Advanced Custom Fields (ACF), one of the plugins WP Engine acquired from Delicious Brains in 2022, has published the results if its first annual survey. Although ACF reports more than 4.5 million active users, including PRO site installs, the survey only gathered feedback from 2,031 respondents.
These results are more representative of the plugin’s developer community, as 81% of respondents are developers who maintain between 11-50 websites. 63% use version control for their codebase, and 27% manage dependencies with Composer.
The survey showed that ACF is still an important tool for its early adopters, as 50% said they have been using it since its early days and 70% of all respondents use the plugin on all the websites they build.
When asked what type of sites they are building, respondents had the option to choose multiple answers. Sites using Classic WordPress themes are the most popular followed by Hybrid themes, Block themes, and page builders. Surveying those who use the block editor, 56% report that they build blocks using ACF blocks.
“It was cool to see the strong representation of hybrid and block themes,” WP Engine Product Marketing Manager Rob Stinson said. “It shows us that there is growing adoption of the modern WP editor experience amongst the PHP friendly crowd that is the ACF user base.
“We had this scoped for upcoming releases anyway, but it reinforces our focus on improving the block building experience in ACF.”
Among those ACF users building sites with page builders, the most popular selections include Elementor, Divi, Beaver Builder, and WPBakery Page Builder. Naturally, ACF Extended is the most popular extension used with ACF, followed by Gravity Forms, Yoast SEO, and ACF Better Search.
Respondents demonstrated high confidence in those maintaining the plugin, as 98% of them are comfortable updating ACF to the latest version. They are also confident in continuing to build on top of WordPress, as 91% of survey participants said they are likely to continue with the platform. For a more detailed look at the questions and responses, check out the 2023 annual survey results on the ACF website.
Gutenberg 16.6 is available with progress on a feature that was formerly called auto-inserting blocks but has now been renamed to block hooks.
In a previous release (16.4), Gutenberg introduced auto-inserting blocks as an experimental feature that allows plugin developers to specify a location in which the block will be automatically inserted, such as before or after a template. Users can then reposition the blocks after insertion using the editor tools.
Gutenberg lead architect Matias Ventura proposedrenaming the feature to block hooks to help developers understand how they work.
“I’ve seen anecdotal feedback that autoInsert is not the clearest of descriptions,” Ventura said. “I’d like to propose renaming to the more familiar hooks terminology—and ‘block hooks’ in more general terms—to help folks understand the mechanics and purpose more rapidly.”
This release also adds an inspector panel for block hooks, tentatively named “Plugins,” that displays blocks available for auto-insertion. It includes toggles to insert or remove them. The updated version of the feature also includes block icons (not shown below) to help differentiate the toggles.
Gutenberg 16.6 brings improvements to toolbars on nested blocks, where the toolbar now stays attached to the parent block. This change is part of a broader effort to improve nested block experiences. Previously, the toolbar would move around when clicking inside the nested blocks, but this change makes it stay in place for a less chaotic editing experience. The updated toolbar behavior has been rolled out to Navigation, List, and Quote blocks so far.
video credit: Gutenberg GitHub repository PR #53699
This release includes a new keyboard shortcut for duplicating blocks within the List View: (CMD+Shift+d). It enables users to do more from the keyboard while navigating around the List View, instead of having to jump back into the block settings menu or editor canvas. Users can now click twice on the selected (or focused) block or multiple blocks to quickly duplicate them all in one go.
video credit: Gutenberg GitHub repository PR #53559
These highlighted features and more will be landing in the upcoming WordPress 6.4 release. Check out the Gutenberg 16.6 release post for the full list of new features, enhancements, bug fixes, and improvements to performance and code quality.
Media Temple (MT) is closing its doors after 24 years in the hosting industry, with the brand now retired and customers fully migrated to GoDaddy. In 2013, GoDaddy acquired MT “to win the hearts and minds of developers,” as then-CEO Blake Irving told VentureBeat at the time. When it was purchased, the highly regarded brand was focusing on advanced technical services that GoDaddy had not yet adapted, and the plan was to have MT operate independently with no changes for employees or customers.
Thanks for allowing us to serve you for 24 years. The time has come to say goodbye. We will miss you. Keep building amazing things!
The year following the acquisition, Media Temple launched its managed WordPress hosting product, joining the ranks of Flywheel, Page.ly, WordPress.com, WP Engine, and a handful of other companies that were working to elevate the hosting experience for WordPress users.
In December 2022, MT announced it would be retiring the Media Temple brand and transitioning accounts to GoDaddy, while subtly acknowledging the sentimental place MT holds in many of its customers’ hearts:
Since joining GoDaddy, we worked hand-in-hand with them to incorporate the best of Media Temple into offerings, including improving GoDaddy’s customer experience and leveraging Media Temple’s unique expertise on what it truly means to run a world-class hosting organization. If you closely examine GoDaddy’s hosting offerings, you will find Media Temple’s fingerprints all around. From specialized teams who deal with complex hosting issues to programs like GoDaddy Pro specifically targeting creatives, Media Temple made its mark on GoDaddy.
Fans bid the brand farewell on Twitter, as its retirement marks the end of a chapter in web hosting history.
Basically the entire design community was sponsored by Media Temple back in the day.
In February 2023, Media Temple began migrating accounts to GoDaddy, with no action required from customers. Many of the products and services were already fulfilled through GoDaddy, decreasing the number needing to be migrated.
Now that the process is complete, the brand will discontinue operations and move current resources into supporting customers inside GoDaddy. The company assured former MT customers that they will retain their current products and pricing for equivalent products with access to more tools.
WooCommerce is experimenting with improving the store experience through the addition of the Interactivity API to the WooCommerce Blocks plugin. The new API, which was announced earlier this year, will allow developers to build interactive blocks that support frontend experiences where visitors can interact with content without having to refresh the page. The WordPress contributors working on the API are encouraging developers to test it with their own blocks.
WooCommerce Blocks 10.9.0, released in mid-August, integrated the Product Button with the Interactivity API to support real-time counter updates for the mini-cart, smoother animations, and better transitions from ‘Add to Cart’ to ‘Loading’ status to show the quantity in the cart when a product is added.
The difference is subtle but creates a much smoother shopping experience with nearly instantaneous feedback for the user. Contributors are also exploring how the Interactivity API can be used to improve frontend filters, including the rating, price, stock, and attributes filters. The API will eventually land in Gutenberg and WordPress in the future, but in the meantime WooCommerce is experimenting to see how the plugin’s blocks can benefit from it.
Version 11.0.0 was released last week introducing the new Product Collection block in beta:
Like the Products block, you can choose what criteria affect the list of blocks displayed to shoppers and control the product layout in the list/grid by the various element blocks.
Unlike the Products block, which is a Query loop block variation, this block is a standalone block, enabling us to tailor the block further to better meet the merchant’s needs.
The Product Collection block is very similar to the Products block from which it was forked, except it is not built as a variation of the Query Loop. It comes with improvements around Inspector controls as compared to the current Products block, as well as a basic set of patterns. The block already has the Interactivity API integrated for the same improved frontend performance.
Version 11.0.0 also enables manual migration of Products to Product Collection. An upgrade notice will appear in the Inspector Controls, informing users that they will get more features with the Product Collection block:
As the Product Collection block is still in beta, WooCommerce Blocks has not yet changed existing templates that have Product blocks. The development team is looking for more feedback on this block before moving it out of beta. Check out the release post for more enhancements and bug fixes.
Human Made, a leading enterprise WordPress agency, is organizing a followup event to the community’s first ever AI for WordPress virtual conference that it hosted in May 2023. The second edition is called “AI: The Next Chapter” and will take place online on September 14, 2023, at 10AM EST.
The first event had 13 speakers and drew more than 600 attendees. It focused on WordPress and AI tools that people are building with the emerging technology. (Videos of all the sessions are available on YouTube.) This next edition will explore some of the wider societal, ethical, and tech issues related to the subject.
The keynote and intro will feature Matt Mullenweg on “AI and the future of WordPress,” along with Human Made CEO Tom Willmot. Dr. Eleanor Drage, a senior research fellow at the University of Cambridge and co-host of The Good Robot podcast, will be speaking about AI and gender. Open source LLM researchers from Georgian will also join for a panel discussion on why they believe open source AI is the best way for companies to leverage this technology.
Registration is free and participants can sign up on the event’s website. A confirmation email is sent out to registrants and more information will follow via email.
Human Made has developed a keen interest in fostering exploratory dialogue through these events, as the company is working on AI products and custom implementations for clients. At the first event, the agency showcased some early work in the Altis Accelerate plugin and have been working with clients to determine how AI can augment existing marketing and editorial workflows.
“The progress and innovation we’re seeing in AI is so rapid at the moment that it kind of demands you stay close to it, keep following what’s happening, and keep learning,” Human Made Marketing Director Alex Aspinall said. “AI is one of our core areas of focus, across all parts of the business, so we’ll definitely be building, sharing, and hosting more in the space in the months to come. Doing all this in the open is really important to us, so the events are a great platform.”
During the first event, Aspinall reports that Human Made saw registrations and participation across a wide range of business verticals and role disciplines, with conversations continuing months after the first event.
“While there are a few businesses and individuals building things, experimenting, and commercializing their work in the area, the vast majority are still finding their way through, figuring out how best to implement AI to deliver tangible benefit to their companies, their clients, their teams, and their day-to-day lives,” Aspinall said.
“Despite the level of advancement we’ve already seen, we’re still right at the start of this thing, which is really exciting. There’s a lot to learn, and considerable edge available for those experimenting and putting things in place. Imagine what we’ll be talking about this time next year!”
After an accumulation of undisclosed and unpatched vulnerabilities in plugins hosted on WordPress.org, Patchstack has reported 404 plugins to WordPress’ Plugin Review Team.
“This situation creates a significant risk for the WordPress community, and we decided to take action,” Patchstack researcher Darius Sveikauskas said. “Since these developers have been unreachable, we sent the full list of those 404 vulnerabilities to the plugins review team for processing.”
Ordinarily, reporting plugins to WordPress.org is a last resort for challenging cases after Patchstack fails to find a way to contact the vendors. In this case, many of these plugin authors have included zero contact information in their extensions or are not responding to communication attempts. Patchstack has characterized it as a “zombie plugins pandemic” due to the overwhelming number of abandoned plugins affecting more than 1.6 million sites.
The WordPress.org Plugins Team has acted on the report by closing more than 70% of the plugins. In June, the team added six new sponsored volunteers and opened applications for more team members but have struggled with managing a formidable backlog of plugins waiting to be reviews. The backlog is climbing higher and is now over 1,119 plugins with a 71-day wait time.
Adding plugin vulnerability issues, where hundreds have to be closed, only adds to how long developers have to wait to get new plugins reviewed.
As of August 31, 2023, Patchstack reports the following stats associated with these reports to WordPress.org:
404 vulnerabilities
358 plugins affected
289 plugins (71,53%) – Closed
109 plugins (26,98%) – Patched
6 plugins (1,49%) – Not closed / Not patched
Up to 1.6 million active installs affected
Average installs per plugin 4984
Highest install count 100000 (two plugins)
Highest CVSS 9.1
Average CVSS 5.8
“Oldest†plugin – 13 years since the last update
Patchstack is urging developers to add their contact details to their plugins’ readme.txt and/or SECURITY.md files. To streamline security issue management, the company has created the Patchstack mVDP (managed vulnerability disclosure program) project, which is free for developers to join. Patchstack validates the reports that come through, rewards the researchers, and passes them to the vendor to be addressed.
The company is also advocating for a dashboard alert when a plugin or theme is removed due to security reasons, as WordPress does not currently give the user this information. Their researchers will soon be submitting more reports that may result in closed extensions.
“We are preparing more similar lists for the WordPress.org themes repository and repositories focused on premium products,” Sveikauskas said. “We are currently processing about extra 200+ similar vulnerabilities.”
Kevin Ohashi from Review Signal has published his 2023 WordPress and WooCommerce hosting performance benchmarks. This is his 10th round of capturing performance data from hosting companies that opt into the testing. Ohashi’s methodology tests two metrics through a variety of methods: peak performance and consistency.
The benchmarks include a LoadStorm test designed to simulate real users visiting the site, logging in, and browsing (uncached performance). They also test cached performance, SSL, WP queries per second, performance on some computational and database operations, and a WebPageTest that fully loads the homepage and records how long it takes from 12 different locations around the world. As part of the consistency testing, Ohashi also measures uptime using HetrixTools and Uptime Robot for a minimum of three months.
Participants pay a standard, publicly documented fee, based on the price tier of the product being tested, to cover the costs. Ohashi does not accept sponsorships for the tests, and has become one of the most trusted sources for unbiased performance reviews of WordPress hosting plans.
In 2023, Ohashi tested 31 companies across 72 plans and seven pricing tiers, with tests nearly identical to previous years. He made minimal adjustments to the LoadStorm test script to improve performance and make it compatible with newer versions of k6.
The website makes it easy to review results at a glance by using a star system. Hosts that achieve “Top Tier” status receive a full star:
This is awarded to companies who maintain 99.9% uptime throughout the entire testing and show little to no performance degradation during load testing, primarily focused on error rate and consistent response times. Error rates above 0.1% and response times above 1000ms* will keep a company away from achieving Top Tier marks.
The half star indicates “Honorable Mention” status, which is given to companies that came close to Top Tier but fell just short, such as struggling slightly on a load test.
Among budget hosts in the <$25/month category, the majority of hosts (16/21) rang in at the Top Tier level. Those who did not earn Top Tier status were held back by inferior performance on the the LoadStorm test for the most part, even though several still took top scores in other aspects of the testing.
There are fewer participants at the $25-50 plan (and other more expensive plans) but the results are similar to the budget hosts, with A2 Hosting, Cloudways, and Stromonic edged out of contention for Top Tier. All three failed to achieve Top Tier for any of the plans tested this year.
In the Enterprise tier ($500+), the majority of participants handled the LoadStorm test without issue. When testing cached performance, Ohashi found that the overall field of participants is getting faster:
Excluding Seravo, every company was 33ms average or below and 43ms p95 or below. Compared to last year where the fastest average was 6.4 ms and p95 was 20ms. There are four companies this year below both of those levels. The performance at the Enterprise tier is mind bogglingly fast and getting even faster which is hard to comprehend when last year’s 6.4ms was beaten by 4 plans this year.
Most of the entrants in the WooCommerce category earned Top Tier status, with the exception of Blallo and Cloudways, both of which stumbled on the LoadStorm test. The hosting plans tested range from $25.95/month – $99/month. The WooCommerce-specific tests collect average response times, total requests, errors, and other metrics across four different profiles:
Profile 1 (20%): Buyer – Homepage, add item to cart, go to cart, checkout (doesn’t submit order)
A more detailed breakdown is available on the WooCommerce benchmarks results page.
It’s important to note that the tests do not clearly identify a winner or top performer. They also don’t take into account other aspects of the WordPress hosting experience, like reviews, support, and features. Ohashi tests the defaults for all of these plans, but if there are more optimization features that can be customized for sites (which are not clearly outlined in the initial setup) then those are also not taken into account. The methodology simply focuses on performance, so it’s just one factor of hosting, albeit a very important one.
“As far as surprising results, I keep thinking ‘Are we nearing the point that we won’t see much improvement?’ and each year the whole field gets faster and faster,” Ohashi said. “Even improving on sub 10ms times between years. For example, in the <$25/month tier, in 2022 there were 3 companies with <50ms average response time on the Static k6 test. This year there are 10. I also saw 100ms+ improvements from the other (slower) side bringing up the whole field a meaningful amount. Everyone is getting faster and faster.”
Why Are Some Managed WordPress Hosting Companies Missing?
There are many leading WordPress managed hosts that are notably absent from Ohashi’s benchmarks, whose inclusion would be helpful for a deeper understanding of market. I asked him about a handful of them and he reported that WP Engine, Dreamhost, and Kinsta declined to participate this year, to name a few. GoDaddy took a year off but may be back next year.
The major reasons for hosts not wanting to participate fall into a few categories, and bad performance is chief among them.
“Some companies perform poorly or poorly relative to price and don’t want to participate anymore,” Ohashi said. “They usually talk about other ‘intangible’ values that you can’t measure. I think good performance should be a default for every hosting company, and good companies shouldn’t be afraid of bad results – if they actually plan on improving their services.
“But some would probably rather spend fortunes on marketing instead of better engineering, and bad results aren’t going to help their marketing. I personally love seeing companies who participate year after year despite mixed results. I respect the companies who consistently earn Top Tier are doing a great job. But there’s something special about companies willing to put themselves out there regardless of the results, because it’s a public and open commitment to improving.”
Ohashi said that occasionally the timing doesn’t work out where a host is going through a major engineering overhaul during the testing and doesn’t want the platform benchmarked when they are about to release a new one. In this case some opt to skip a year.
The costs of the benchmarking can also be prohibitive for some smaller hosting companies. Ohashi raised prices by $250 across all tiers this year (eg. $100->$350, $500->$750) to cover his costs. Although this doesn’t seem like much for a hosting company, they also have to pay for the servers for four months, and have the staff/resources available to work with Ohashi on organizing, executing, and debugging issues. 20i, Krystal Hosting, Nexcess, and Pressable agreed to sponsor upstart companies in the space for 2023.
Another reason some hosts don’t participate is a lack of interest or value. They don’t see how they can use the benchmark results to their advantage.
“Some companies don’t get as much value from the benchmarks as others,” Ohashi said. “Performance across the board has gone way up. It’s harder and harder to stand out.
“I think some companies may view it as an instant validation and reason for customers to come busting down the doors. But there are a lot of great companies offering great performance. Earning Top Tier status means you’ve got a performant hosting platform. It’s great, and it can help validate some customer needs/desires in the decision making funnel, but it won’t magically generate tons of sales.”
Ohashi said he has put together notes for hosting companies that earned Top Tier status to help them leverage more value this year from a marketing perspective, based on what he has seen some companies do with their results. Creating more value for participating companies is something he is actively working to improve upon.
Although Review Signal had approximately 35,000 people visit in the past year, Ohashi doesn’t think the traffic captures the full value of the benchmarks very well. The people who dig into these metrics are those who have a large impact on where their WordPress clients host their websites.
“The people who care about the benchmarks are seriously into WordPress / hosting / performance,” Ohashi said. “It’s a lot of agencies, developers, large website owners and hosting people. One way I’ve measured impact is by going to the major WordCamps (EU/Asia/US) and talking to people. The number of folks who are aware of the benchmarks there was surprisingly high to me. The people who are interested enough to spend time at WordCamps are the same folks interested in reading the benchmarks. It’s not the largest number of people who read them, but it is the largest impact people who read and value them.”
After an in-depth performance analysis earlier this year revealed that translations can impact server response times, WordPress contributors proposed half a dozen technical solutions for consideration to improve performance for the ~56% of sites that use translations.
Performant Translations, a feature project by the core Performance Team, is now available as a plugin on WordPress.org. It incorporates some of the proposed solutions and speeds up translations by converting .mo files to .php files, allowing them to be parsed faster and stored in OPcache.
It supports multiple file formats (.mo, .php, and .json) and multiple text domains and locales loaded at the same time. Existing .mo files get converted to .php files which are then loaded by WordPress.
A chart included on the plugin’s details page shows a significant page load time reduction when using the plugin, as compared to sites with translations that don’t use the plugin. The plugin brings translations very close to the same page load times as English (non-translated) sites.
“With enough testing and feedback, we hope to eventually merge this plugin into WordPress core,” Performance Team contributor Pascal Birchler said when announcing the plugin on X.
“In the coming weeks and months we will share more testing instructions and continue to improve the plugin. This will be made available via Performance Lab, too.”
Performant Translations is considered to be a beta testing plugin but can be tested and used in production at your own risk. It doesn’t require any changes to settings or configuration after installation. The plugin can be safely removed after testing, because it essentially cleans up after itself. All .php files it generates will be removed by the server once the plugin is deactivated and uninstalled.
A collection of leading WordPress agencies have launched a collaborative project to promote the platform to large-scale organizations. Big Bite, in partnership with 10up, Alley, Human Made, Inpsyde, and XWP, have published a free WordPress for Enterprise guide that includes contributions from Google and WordPress VIP.
The guide highlights many high profile companies and organizations using WordPress, including CNN, Vogue, Google, The Wall Street Journal, Spotify, Harvard University, the White House, Meta, PlayStation, and many more.
Even after 20 years of unprecedented growth and adoption across major brands, the misconception that WordPress is just a blogging platform persists among many who don’t keep up to date with open source software.
“Despite being the number one CMS, many people still associate WordPress solely with bloggers and small businesses, and are surprised to learn that it powers sites for some of the biggest brands on the planet,” Big Bite CEO Iain McPherson said. “By coming together to create this guide, we’re aiming to change that perception and highlight the many advantages it offers to enterprise organizations that have lots of contributors, lots of content, and lots of challenges.â€
The guide offers an easy-to-read overview of how well-suited WordPress is for the enterprise market and the possibilities for creating a customized platform to fit any organization. It includes short chapters on the following topics:
From small blogs to big brandsÂ
Open source advantagesÂ
Platform security
Scalability and internationalization
Solution cost and value
Editorial experience
Performance mattersÂ
Feature extensibility
Headless capabilities
“While smaller brands are able to switch CMS platforms fairly easily, for large-scale enterprises it’s often a major undertaking, so we hope this guide makes the decision process much easier for those exploring open source options,” WordPress VIP Director of Product Marketing Michael Khalili said.
The guide is a useful resource for large organizations examining WordPress as a platform or for small agencies looking to pitch WordPress to larger clients. It’s free and does not require you to enter your email address or other contact information to download it.