How Headless WordPress Works with Next.js

Hiding the Classic block from the inserter in WordPress 7.1

Trong WordPress 7.1, khối Classic (core/freeform) sẽ bị ẩn khỏi trình chèn block theo mặc định nhưng vẫn hoạt động bình thường với các block đã tồn tại. Nhà phát triển có thể khôi phục chức năng này thông qua bộ lọc wp_classic_block_supports_inserter hoặc plugin nhỏ, nhằm từng bước đưa khối Classic trở thành tùy chọn và tối ưu hóa việc tải TinyMCE khi cần thiết.

Những lập trình viên phát triển plugin hoặc theme WordPress nên đọc để hiểu cách điều khiển và tương thích với thay đổi mới về Classic block, đặc biệt khi cần bảo tồn tính năng cũ hoặc xây dựng plugin hỗ trợ tính năng này trong tương lai.

WordPress Search Plugins Compared by Use Case

WordPress's default search only queries post titles, excerpts, and content via SQL LIKE, missing custom fields, taxonomies, and WooCommerce data. This guide categorizes search plugins into four types: full search replacements (SearchWP, Relevanssi), infrastructure-level services (ElasticPress, WP Engine Smart Search), AJAX/live search plugins (Ajax Search Lite, SearchWP Live Ajax Search, Ivory Search), and faceted filtering tools (FacetWP, WPFilters). SearchWP suits teams wanting visual configuration; Relevanssi offers deeper code-level control and better agency licensing. FiboSearch is the fastest path to WooCommerce live search, while SearchWP Pro handles complex product metadata. For large or high-traffic sites (50k+ posts), ElasticPress offloads search to Elasticsearch, while WP Engine Smart Search provides a managed alternative. The guide also covers evaluation criteria: custom field indexing, search analytics, and combining search engines with faceted filtering layers.

Discover LightSync Pro: Bridge Your Creative Tools To WordPress

LightSync Pro is a WordPress plugin that connects creative tools like Lightroom, Canva, Figma, Dropbox, and Shutterstock directly to the WordPress media library. It eliminates the manual export-upload workflow by syncing assets directly, converting them to AVIF/WebP/JPEG and compressing them on import. A key security feature routes credentials through a separate broker so API keys never touch the WordPress database. The sync is non-destructive — re-syncing updates the existing file in place, preserving attachment IDs and avoiding broken references. An MCP integration allows media imports to be driven via AI assistants like Claude. Pricing includes a free tier on the WordPress plugin repository, a Pro+ plan at $199/year, and an Agency plan at $699/year.

Vercel debuts eve open source agent framework, tries to fix shadow AI with Passport

Vercel unveiled eve, an open source agent framework using TypeScript and Markdown, at its Ship event in London. Eve simplifies agent creation with a 'fill in the blanks' approach — agents are defined as directories with files for instructions, tools, auth, and scheduling, sandboxed on isolated VMs. Deployment uses the standard vercel deploy command, and any AI SDK-compatible model can be used. Vercel also announced enterprise features including Passport (OpenID Connect-based identity control for employee-built apps), Vercel Connect (short-lived OAuth tokens replacing static credentials), Enterprise Managed Users (directory sync), and Bring Your Own Cloud (BYOC) on AWS. Passport targets 'shadow AI' — employees building vibe-coded apps with company data outside IT governance. The article also covers Vercel's cost positioning versus AWS Lambda and its ongoing competitive tension with Cloudflare over platform openness.

SocGholish Takedown Highlights Malicious TDS Threats

An international law enforcement operation (Operation Endgame) seized 106 servers and numerous domains tied to SocGholish, a JavaScript malware framework used as an initial-access broker for ransomware groups including Evil Corp. The action also remediated nearly 15,000 compromised WordPress websites. SocGholish relies on traffic distribution systems (TDSs) to redirect users from legitimate sites to fake browser update pages, filtering out researchers and bots while targeting domain-joined enterprise systems for deeper intrusion. The FBI issued guidance urging organizations to change default JavaScript file associations, monitor endpoints for suspicious script execution, keep CMS platforms updated, and audit administrator accounts to defend against TDS-based attacks.

9 Link Building Methods That Actually Work for WordPress Sites

A beginner-friendly guide covering 9 link building strategies for WordPress sites, including internal linking, broken link building, guest posting, resource page outreach, creating linkable assets, using Connectively (HARO), relationship building, competitor backlink analysis, and reclaiming unlinked brand mentions. Also covers how to evaluate backlink quality, what to avoid (black hat SEO), and a 30-day action plan to get started.

Explore what's next

Joomla 6.2 Alpha 2 is now available for testing, targeting a stable release on October 13, 2026. This alpha includes 13 merged features and fixes such as a new backend help page, differentiated delete/uninstall icons, image and figure classes for articles, multiload of article associations, and various bug fixes. The release is intended for extension developers to test compatibility and for users to explore upcoming features — not for production use. Nightly builds are available, and a free test site can be launched at launch.joomla.org. Future plans include stability and performance improvements for large sites, accessibility enhancements, and bug fixes.