May 2023 was a landmark month in the WordPress ecosystem, marked by celebrating its 20th anniversary. WordPress crossed two decades of powering the web, so the global community came together to reflect on its evolution and look ahead to a more dynamic, block-driven future. In parallel, the month saw the release of WordPress 6.2.2, several critical plugin security patches, and notable acquisitions in the plugin and ecommerce segments. These developments reflect the continued maturing of the platform, with innovation, security, and strategic consolidation at the forefront.
Mergers, Acquisitions, Investments
May was eventful on the acquisitions front, with four strategic transactions reshaping the plugin and ecommerce toolset landscape:
- group.one acquired Rank Math on May 30, signaling a powerful new direction for SEO offerings under a broader digital services umbrella. This move brings one of the most popular SEO plugins into a larger ecosystem to serve SMBs across Europe and beyond.
- Rymera Web Co., known for its role in WooCommerce extensions like Wholesale Suite, acquired WC Vendors on May 10. This acquisition strengthens Rymera’s portfolio in terms of multi-vendor marketplace functionality.
- On May 2, MemberPress finalized its acquisition of WishList Member, integrating one of the oldest membership plugins into its platform to offer content creators broader access control and monetization options.
- Meanwhile, WPExperts expanded its WooCommerce capabilities by acquiring Payment Plans for WooCommerce, aiming to enhance customer flexibility and improve sales conversions.
These transactions highlight the increasing competition and specialization in WordPress plugins, especially in ecommerce, SEO, and membership management.
WordPress Core Updates
On May 20, 2023, WordPress 6.2.2 was released. This security and maintenance update addressed a regression in shortcode support and enhanced REST API endpoint security. This swift patch strengthens stability and data handling ahead of upcoming feature cycles. Meanwhile, work commenced officially on WordPress 6.3, aiming for an August 8, 2023, release.
Other WordPress News
May marked the official 20th anniversary of WordPress on May 27, 2023, celebrated through over 130 global events and the release of the commemorative book Building Blocks: The Evolution of WordPress. Leadership highlighted how far WordPress has come and where it’s headed.
The Gutenberg plugin also saw three major releases: 15.7, 15.8, and 15.9. These releases improved logo upload, duotone filters, fluid typography, revision previews, and a new Site Editor command tool, continuing to advance Site Editor flexibility and usability.
Security Alerts & Plugin Vulnerabilities
Several significant plugin vulnerabilities were patched in May 2023:
- Advanced Custom Fields (ACF) suffered a reflected XSS (CVE-2023-30777) allowing data theft; users are urged to upgrade to 5.12.6/6.1.6.
- Essential Addons for Elementor had a critical privilege escalation (CVE-2023-32243); fix available in v5.7.2.
- An Unauthenticated XSS vulnerability in the Beautiful Cookie Consent Banner was broadly exploited; admin accounts may be compromised.
Admins are strongly advised to update or disable impacted plugins and implement security best practices such as backups and scan tools.
Industry Trends & Insights
The WP 20 celebration underscored WordPress’s maturity and focus on community-driven sustainability, including mentorships, multilingual documentation, and specialized event formats. Performance-focused releases and Gutenberg enhancements set the stage for robust future development paths.
Theme of the Month: Twenty-Twenty-One Blocks
This is a modern reimagining of the core theme with full block support. It balances classic simplicity with fresh block features and flexible customization, ideal for those seeking a refined yet adaptable foundation.
Plugin of the Month: Spectra
Previously known as Ultimate Addons for Gutenberg, Spectra is praised for being lightweight and offering a rich block-addition toolkit, such as advanced grids and models, without compromising site speed or compatibility.
Agency of the Month: Seahawk Media
Seahawk Media continues to offer elite WordPress solutions, covering site migrations, security, SEO, and custom development. They communicate transparently and deliver stellar client satisfaction, cementing their reputation as a leading agency.
Host of the Month: GridPane
GridPane stood out for its self-managed, VPS-focused platform, offering developers tools like one-click staging, container-based deployment, and advanced caching through a developer-friendly interface.
Founder of the Month: Rian Rietveld
A longtime contributor to WordPress.org, Rian excels in marketing, training, and community leadership. In May, she played a key role in WP 20 initiatives and contributor mentorship programs, helping sustain community growth.
Looking Ahead to June 2023
June brings WordCamp Europe 2023 and the contributor-led WP 20 book build-out in Athens. With the growing momentum toward WordPress 6.3 and full-site editing, core, plugin, and theme developers should prepare for intensive compatibility updates and performance testing.