#wordpress — Web Hosting News
All web hosting articles tagged #wordpress — 62 results.
✦ Featured
M&A
Thirty Deals in Six Months: The H1 2026 Hosting Consolidation Map, and the Two Clocks Driving What Sells Next
H1 2026 produced a US$1B Polish hosting-commerce merger, a $450M registrar champion, serial buyers closing two deals apiece within a fortnight, and a $40B data-centre record, while Google's AdSense shutdown forced Sedo and Team Internet to market. The map, the multiples, and the debt walls pushed to 2028-2029.
GoDaddy Q2 2026: More Revenue From the Same Customers
Industry reports #airo#arpu
GoDaddy's Q2 2026: revenue up 6.6%, EPS up 30%, customers up by just 22,000. ARPU, upsell and an $851.8 million buyback are doing the work, and the segment split shows domains and hosting growing slowest of all.
The Hosting Price Squeeze, Part 3: The Playbook
Expert's Voice #control-panel#pricing
In the final part of the series, BrandForge CEO Michiel Grotenhuis turns to the practical question: what do you actually do about rising hosting costs? He borrows from streaming, SaaS, and retail, shares what the community is doing, and argues for reducing dependence on any single vendor.
The Renewal Multiplier Index: What Hosting Costs After the Intro Price
Pricing updates #bluehost#hostinger
First edition of our quarterly index, measured July 29: SiteGround renews at up to 5.3x, the price-lock club at 1.0x, and GoDaddy, HostGator, and Namecheap mid-band at 1.7–3.7x. At every provider with a full plan range, the entry plan renews at a higher multiple than the top plan.
Articles tagged #wordpress
1–20 of 62
Security
A Once-a-Decade WordPress Core Flaw, and the Gap Between Patched and Safe
A critical flaw in WordPress core, the first of its kind in nearly a decade, triggered a rare forced update to millions of sites. Within 72 hours it was mass exploitation, because forced updates never reach everyone. Why patched and safe are not the same thing.
Security
An Unauthenticated Path to Code Execution in WordPress Core, Already Being Exploited
A flaw in the heart of WordPress lets a complete stranger seize a site without ever logging in, and the attacks began the day it was disclosed. Millions of sites run the vulnerable code, and the only real protection is an update most owners assume already happened.
Partners
Top 5 Mistakes Hosting Companies Make That Drives Churn and How to Fix Them
Customers rarely churn because they found a better host; they leave because they felt lost, overwhelmed, or misled. Extendify lays out five fixable experience gaps, from confusing plans to invisible security, that decide whether a first-time customer stays or disappears.
Security
Three Unauthenticated File Flaws in a Week, and One Root Cause: Validation by Shortcut
Between July 7 and 9, three serious unauthenticated flaws surfaced in file-handling code: an RCE in Blocksy Companion Pro, arbitrary file deletion in Frontend File Manager, and an SSRF in Monsta FTP. Different codebases, one root cause, and a blast radius that lands on the hosting provider.
M&A
Automattic Has Taken Over WebHosting.com. The Plan Is Still a Coming-Soon Page.
WebHosting.com, a premium one-word .com long dormant under AT&T, now resolves to an Automattic-branded "coming soon" page, confirming the WordPress parent controls it. There is no announcement, price, or stated plan. The move fits Automattic's broader hosting push, but its plans are unconfirmed.
Industry reports
AI Agents Now Run Hosting Operations, Not Just Content. Pressable’s June Update Is the Tell.
Pressable, an Automattic hosting lab, expanded its MCP integration in June so AI agents can run caching, backups, SSL, WP-CLI and bulk operations across a WordPress portfolio. With Rocket.net shipping a native MCP server too, the hosting control panel is becoming an interface built for agents.
Other
Automattic Turns the WordPress Admin Into a Desktop Software
Automattic's Desktop Mode turns /wp-admin into a desktop OS: resizable windows, a dock, virtual desktops, and AI search. Built in three days during Radical Speed Month, it signals the same UX rethink behind WordPress 7.0 and WooCommerce 10.9.
Industry reports
WooCommerce 10.9 Ships Agent Abilities. The Hard Part Now Belongs to the Hosts.
WooCommerce 10.9 (stable June 23) ships canonical, MCP-exposable abilities for products and orders across 4.3M live stores. Shopify flipped agentic storefronts on for 5.6M merchants; WooCommerce has no central switch, making agent access the hosting industry's next managed-service battleground.
Industry reports
Patchstack Now Underpins Most Major Managed WordPress Hosts. GoDaddy Joined the Stack.
Patchstack became the default WordPress vulnerability intelligence and virtual patching layer for managed hosting. GoDaddy joined as a full-integration partner in April 2026; WP Engine, Cloudways, Hostinger, Nexcess, Pantheon and most other major hosts already use Patchstack threat intelligence.
Other
Protect The Shire: WordPress Adds a 24-Hour Default Delay to Plugin Auto-Updates
Matt Mullenweg announced Protect The Shire on June 5, 2026: a 24-hour default delay before every WordPress plugin release reaches auto-updates. The infrastructure has existed as opt-in since August 2025. The shift cites AI-accelerated supply chain risk after Mythos and Essential Plugins.
Other
WP Engine Counsel Seeks WordPress Foundation Dissolution as WordCamp Europe Opens
WP Engine pursues WordPress Foundation dissolution. The June 4 hearing coincides with WordCamp Europe's opening day in Kraków.
Other
WordPress and AI Tools: How to Use Automation Without Compromising User Privacy
AI tools are now standard across WordPress environments, and hosting providers can no longer treat data privacy as a static concern. This article breaks down what changes, what risks emerge, and what you can do about it.
Software reviews
WordPress 7.0 Ships. PHP 7.4 Required. AI Built In. Real-Time Collaboration Delayed.
WordPress 7.0 ships May 20, 2026 with a built-in AI Client supporting Anthropic, Google, and OpenAI, a raised PHP minimum of 7.4, and DataViews replacing the admin screens. Real-time collaboration was cut on May 8 due to race conditions, server load, and fuzz testing failures.
Industry reports
How Web Hosts Can Compete in a Saturated Market with Bundled WordPress Support Services?
The hosting market is saturated and price wars are eroding margins. Discover how bundling WordPress support services helps providers build deeper customer relationships and compete on value, not cost.
Security
FunnelKit Plugin Flaw Actively Exploited to Skim Credit Cards From WooCommerce Checkout Pages
Every customer who checked out on a WooCommerce store running an unpatched FunnelKit plugin may have had their card number, CVV, and billing address stolen. The attack is active across more than 40,000 sites. Patch to version 3.15.0.3, released May 14, 2026, and assess breach notification obligations.
Partners
WordPress Privacy Compliance: GDPR, CCPA, and Global Privacy Rules Simplified
GDPR, CCPA, and more than 130 national privacy laws affect every WordPress site you host. From cookie consent to data residency and processor contracts, hosting providers carry more compliance weight than most realize.
Software reviews
Extendify Delivers WordPress Sites Before First Login. Version 3.0 Adds One-Prompt Setup.
Extendify addresses the blank WordPress install problem that drives early hosting churn. AutoLaunch lets hosting providers create a finished site during their own signup flow, version 3.0 adds one-prompt website creation, and the AI Agent keeps customers managing their site from within WordPress rather than opening a support ticket.
Industry reports
Mullenweg Calls WordPress “Mediocre Crap” and Overrules Core Committers on 7.0
Matt Mullenweg called WordPress development "boring or mediocre crap," then overruled core committers to add Akismet to the WordPress 7.0 Connectors screen, weeks before the May 20 release.
Software reviews
Automattic’s New CLI Agent Builds WordPress Sites From a Text Prompt
Automattic launched Studio Code in public beta, a CLI agent built on Anthropic's Claude Sonnet 4.6 that builds, configures, and publishes WordPress sites from natural language commands, running on top of MCP write capabilities launched in March 2026.
Events
WordCamp Europe 2026, Kraków: Why the Hosting Industry Shows Up
WordCamp Europe is where WordPress platform decisions get made in public before they reach the market. The 2026 edition runs June 4-6 in Kraków, two weeks after WordPress 7.0 ships. For hosting providers, being in the room matters more this year than most.