A low-severity broken access control flaw in FluentForm — disclosed by Patchstack and already being targeted by automated scanners — has been patched. Update to version 6.2.2 immediately.
PLUGINS
Otter Blocks 3.2.0 brings AI-powered layout generation and a rebuilt pattern library to the block editor, with AI form autoresponders gated behind the Pro tier and full compatibility confirmed for WordPress 7.0.
Users who switched to Elementor's atomic editor found every Yoast SEO analysis panel returning empty results — no text length, no keyphrase density, no readability scores. Yoast's latest update closes that gap entirely, restoring full content analysis with no reconfiguration needed.
Three ShapedPlugin Pro plugins shipped a CVE-2026-10735 backdoor rated CVSS 9.8, pushed through the vendor's own licensed update pipeline. The payload steals passwords and 2FA seeds.