Weekly field notes · 2026-09-20

WordPress Trend Report — 2026-09-20

WordPress 7.2 plans include a React 19 upgrade and a new Secrets API, while the 7.1.1 security release addresses 11 critical vulnerabilities.

Report settings

Weekly Summary

Article Inventory (12 articles)
  1. Roadmap to 7.2 (Make Core) — WordPress 7.2 is scheduled for release in early December 2026, featuring a React 19 upgrade, a new Secrets API for secure credential storage, and a "sudo mode" for re-authenticating sensitive actions.
  2. X-post: Proposal: Indentifying WPCC Participants through WordPress.org Profiles (Make Core) — This proposal suggests adding visual designations to WordPress.org profiles to identify participants in the WordPress Campus Connect and WordPress Credits mentorship programs.
  3. Moving to a server-aware approach for collaboration (Make Core) — WordPress is shifting from a client-side CRDT model to a server-aware collaboration approach to address security and functionality gaps.
  4. X-post: Introducing: Test Team Reps for 2026 – 2027 (Make Core) — Erick Wambua and Huzaifa Al Mesbah have been appointed as the Test Team Representatives for the 2026–2027 term.
  5. Call for testing: DataForm editor inspector (Make Core) — The "Editor Inspector: Use DataForm" experiment replaces the classic post inspector summary panels with a DataForm-based interface to unify the UI between the block editor and the Site Editor's Quick Edit.
  6. Introducing Ipsum, the new default theme (Make Core) — Ipsum is the proposed default theme for WordPress 7.2, designed as a minimal "blank canvas" blog theme to replace the year-based naming convention.
  7. Dev Chat Agenda – September 16, 2026 (Make Core) — The September 16, 2026, Dev Chat will focus on the 7.2 release squad, the 7.1.1 RC 1, and updated Node and npm requirements for WordPress development.
  8. What’s new in Gutenberg 24.0? (16 September) (Make Core) — Gutenberg 24.0 introduces visual revisions for post titles, a new Grid variation for the Gallery block with per-breakpoint controls, and a "fit-text" option for the Site Title block.
  9. Maintainer changes for WordPress/WordPress GitHub repo (Make Core) — Maintenance of the WordPress GitHub mirror has been transferred from an individual volunteer to the WordPress.org systems team.
  10. WordPress 7.1.1 Maintenance and Security Release (WordPress.org News) — WordPress 7.1.1 is a short-cycle maintenance and security release addressing 11 security vulnerabilities, including stored XSS in wpautop(), path traversal in the WP REST Templates Controller, and unauthorized post overwrites.
  11. X-post: The AI-Powered WordPress course is now live on Learn WordPress! (WordPress.org AI) — The new AI-Powered WordPress course on Learn WordPress covers the integration of AI into WordPress 7.0 core, including setting up AI provider connectors, using editorial tools, and monitoring activity via Request Logging.
  12. AI Contributor Weekly Summary – 16 September 2026 (WordPress.org AI) — The team is reopening markdown support for the AI plugin to allow AI clients to request markdown versions of posts via dedicated URLs or content-negotiation headers.

The primary focus this week is the roadmap for WordPress 7.2, scheduled for release in early December 2026 (Roadmap to 7.2). Key developments include:

Developer Implications

  • Immediate Security Patching: Developers must update to WordPress 7.1.1 immediately to address 11 security vulnerabilities, including stored XSS in wpautop() and path traversal in the WP REST Templates Controller (WordPress 7.1.1 Maintenance and Security Release).
  • 7.2 Compatibility Planning: Agencies should prepare for the React 19 upgrade and the new Secrets API. Developers can begin testing the DataForm editor inspector, which utilizes a unified Fields API to manage settings across different screens (Call for testing: DataForm editor inspector).
  • Theme Development: The "Ipsum" theme will replace the year-based naming convention as the new default theme for 7.2 (Introducing Ipsum, the new default theme).
  • Tooling Updates: Development environments will need to align with updated Node and npm requirements discussed in recent Dev Chats (Dev Chat Agenda – September 16, 2026).
  • Gutenberg 24.0 Features: Developers can now utilize visual revisions for post titles and a new Grid variation for the Gallery block with per-breakpoint controls (What’s new in Gutenberg 24.0?).

Since Last Report

  • New topic: Roadmap to 7.2 (Make Core) — WordPress 7.2 is scheduled for release in early December 2026, featuring a React 19 upgrade, a new Secrets API for secure credential storage, and a "sudo mode" for re-authenticating sensitive actions.
  • New topic: X-post: Proposal: Indentifying WPCC Participants through WordPress.org Profiles (Make Core) — This proposal suggests adding visual designations to WordPress.org profiles to identify participants in the WordPress Campus Connect and WordPress Credits mentorship programs.
  • New topic: Moving to a server-aware approach for collaboration (Make Core) — WordPress is shifting from a client-side CRDT model to a server-aware collaboration approach to address security and functionality gaps.

What I'm Watching

The WordPress 7.2 release is actively in development and I'm excited to see a new default theme proposal: Ipsum. Also, the enhancements to extend and refine form element support in Global Styles looks handy!

Be sure to update your sites to the latest WP 7.1.1, which features some critical security fixes!

Last, but not least - check out the new AI-Powered WordPress course and learn about things like connecting AI providers and using the newer Ability API.

Source Articles

Make Core

WordPress.org News

WordPress.org AI

Build Notes

  • Articles analyzed: 12
  • Sources: Make Core, WordPress.org News, WordPress.org AI
  • Model: openai-compatible/google/gemma-4-12b-qat
  • Tokens: 14378 prompt + 1818 completion
  • Estimated cost: $0.00 (local model)
  • Review time: ~18 minutes