CVE-2026-49261 scores CVSS 10.0 and allows unauthenticated RCE in MariaDB Galera Cluster deployments. Standalone installations are not affected. Patches shipped May 27.

Automattic's Desktop Mode plugin turns /wp-admin into a windowed desktop OS. Built in three days during an internal sprint, it is already live on wordpress.org.

WooCommerce 10.9 gives AI agents a standard interface to 4.3 million stores. Unlike Shopify, nobody flips the default. That role belongs to the hosting provider.

A Delhi data center fire isolated a Google Cloud POP on June 9, degrading connectivity across three Indian cities. The compute never went down.

Namecheap halted Handshake TLD registrations on June 10. HNS is down 99% from its 2021 peak. Unstoppable Domains pivoted to traditional DNS.

Hetzner is up 30-35%. OVHcloud is up 49%. Shared hosting has not moved. The hardware replacement cycle explains the delay, not immunity from the cost.

Lovable has 50 million total projects and over 1 million new ones weekly. The output is React and Node.js. PHP shared hosting is not where it lands.

ShareShift analyzed 3M+ new European domains. On traditional hosting, 95% of new sites launch without embedded AI. Wix is at 100%, OVHcloud at 0.66%.

GoDaddy joined Patchstack's full-integration partner tier in April 2026. Most major managed WordPress hosting brands already use the Estonian vendor.

WordPress.org made the 24-hour plugin auto-update delay default for every new release on June 5, 2026. Mullenweg calls it Protect The Shire.