January 2026 opened the year with a clear focus on stability, refinement, and ecosystem direction. Rather than major feature launches, the month centered on maintenance work, security awareness, and early signals for where WordPress is headed next.
From post-release improvements in WordPress 6.9 to important community conversations and evolving industry trends, January set a steady foundation for 2026. This roundup covers the key updates, decisions, and developments that shaped the WordPress ecosystem during the month.
Mergers, Acquisitions, and Investments
January 2026 recorded limited merger and acquisition activity across the WordPress ecosystem.
WP Engine acquired BigBite, expanding its capabilities in enterprise WordPress development and digital experience services. The acquisition strengthens WP Engine’s service portfolio and deepens its presence in the agency and enterprise segments.
No other major mergers, acquisitions, or investment announcements were reported during the month.
WordPress Core Updates
January focused on refinement and stability. The core team worked on tightening WordPress 6.9, improving editor consistency, and preparing the first maintenance release of the cycle.
- WordPress 6.9.1 RC1: Released on January 29, 2026, as the first Release Candidate in the 6.9 maintenance cycle, targeting bug fixes across Core and the Block Editor.
- WordPress 6.9.1 General Release: Scheduled for February 3, 2026, to address reported issues and improve overall platform stability and editor reliability.
- Editor Improvements: Developers refined block behavior, improved responsiveness inside the editor, and resolved minor UI inconsistencies to make content creation smoother and more predictable.
- Core Stability Work: Focus remained on resolving edge cases, improving performance consistency, and ensuring safer updates across installations.
- UW Theme Updates: On January 14, 2026, institutional services such as WiscWeb upgraded to WordPress 6.9 alongside coordinated theme updates to maintain compatibility and visual consistency.
Other WordPress News
January 2026 included a mix of community discussion and platform-level milestones beyond core development.
- WordPress.org X Account Controversy: The official WordPress.org account drew criticism after posting mocking and sarcastic comments about the FAIR (Federated and Independent Repository) Project. Developers and contributors widely described the post as unprofessional, with concerns increasing after several critical replies were later hidden.
- Global Language Shift: For the first time, more than 56 percent of WordPress sites are now published in languages other than English. Japanese overtook Spanish as the second most used language, underscoring WordPress’s continued global growth.
Security Alerts and Plugin Vulnerabilities
January 2026 exposed several high-severity plugin vulnerabilities that required immediate attention from site owners and administrators.
- Modular DS Connector (v2.5.2+): A critical CVSS 10.0 vulnerability allowed unauthenticated attackers to create administrator accounts. The issue was actively exploited in the wild starting mid-January, making rapid patching essential.
- WPvivid Backup & Migration (v0.9.124+): A severe CVSS 9.8 remote code execution flaw was patched on January 28. The vulnerability affected more than 900,000 sites and allowed attackers to execute arbitrary code through a faulty RSA decryption routine.
- LA-Studio Element Kit (v1.3.8+): A backdoor-style vulnerability enabled unauthenticated privilege escalation. A fix was released on January 14 for the plugin’s 20,000+ active installations.
- Quiz and Survey Master (QSM): A critical SQL injection vulnerability was disclosed in late January, impacting over 40,000 sites and exposing affected installations to data compromise risks.
These issues reinforced the importance of regular updates, active monitoring, and limiting plugin exposure across WordPress installations.
Industry Trends & Insights
January 2026 reflected clear shifts in collaboration, AI integration, performance, and eCommerce modernization.
- WooCommerce Evolution: High-Performance Order Storage (HPOS) is now the standard for WooCommerce, improving checkout speed and scalability. The fully block-based checkout experience is also driving cleaner flows and lower cart abandonment.
- Collaboration Focus: As WordPress 7.0 development progresses toward its April 2026 release, real-time collaborative editing is becoming a priority. The shift from single-author sites to multi-user workflows is shaping the next phase of the Block Editor.
- Abilities API Transition: The industry is moving away from traditional Roles and Capabilities toward the new Abilities API to manage more advanced permissions for both human users and AI systems.
- AI at the Core Level: AI is being integrated as a system-level participant. Developers are building agent-ready sites using the AI Experiments Plugin and exploring AI-generated patterns for dynamic layouts.
- Performance and Architecture: With WordPress 7.0 dropping support for PHP 7.2 and 7.3, hosting providers accelerated server upgrades. Headless implementations using Astro and Next.js continue to grow, alongside wider adoption of the Interactivity API for smoother, app-like experiences.
Theme of the Month: Kalium
Kalium continued to stand out for its clean design system and flexibility. The theme supports modern block-based layouts while maintaining strong performance and visual consistency.
It offers a wide range of ready-made demos and layout controls, making it suitable for portfolios, agencies, online stores, and corporate websites.
Its integration with WooCommerce and popular plugins adds versatility without slowing down performance. Regular updates and strong documentation also make it reliable for long-term projects.
Plugin of the Month: Orderable
Orderable gained attention for simplifying online ordering workflows, especially for WooCommerce stores. It improves how customers browse products, build orders, and complete purchases.
The plugin is designed for speed and clarity, offering features like timed slots, customizable order flows, and streamlined cart experiences. It works particularly well for restaurants, local delivery businesses, and service-based stores that depend on efficient checkout systems.
Agency of the Month: Seahawk Media
Seahawk Media remained a strong presence in the WordPress services ecosystem. The agency supports businesses with development, migrations, maintenance, white-label services, and performance optimization.
Its WordPress-specialized model allows it to deliver scalable solutions for both small businesses and enterprise clients. Strategic hosting partnerships and global delivery teams continue to strengthen its market position.
Host of the Month: Hostinger
Hostinger continued expanding its managed WordPress hosting platform with a focus on speed and simplicity. Performance enhancements and improved server infrastructure remained key priorities.
The company also invested in user-friendly tools, automated updates, and security layers to support growing websites. Its balance of affordability and performance keeps it competitive among startups, creators, and fast-scaling online businesses.
Founder of the Month: Yoni Luksenberg (Elementor)
Yoni Luksenberg is the co-founder and CEO of Elementor, one of the most widely used website builders in the WordPress ecosystem. Elementor has played a major role in shaping how users design and build WordPress sites without heavy technical overhead.
Under his leadership, Elementor expanded beyond page building into hosting, performance tools, and AI-assisted design features. As WordPress continues to balance blocks, themes, and visual builders, Elementor remains a major influence on user experience and site creation workflows.
Looking Ahead to February 2026
February 2026 is expected to focus on the general release of WordPress 6.9.1 and post-maintenance stability. Developers and site owners will likely prioritize testing, compatibility checks, and refining workflows following the first update of the year.
Work toward WordPress 7.0 is also expected to gain momentum, particularly around collaborative editing and the evolving Abilities framework. Performance improvements, PHP version upgrades, and broader adoption of modern APIs are likely to remain central themes.
Security monitoring and plugin maintenance will continue to demand attention as the ecosystem moves deeper into the new release cycle. February will likely set the pace for technical direction and platform maturity heading into the second quarter of 2026.