November 2018 Edition

WordPress News Roundup November 2018: WordPress 5.0 Reaches Release Candidate as Gutenberg Passes 1 Million Installs

November 2018 saw WordPress 5.0 slip, reach RC1 and RC2, HelpHub go live, Classic Editor support set to 2021 and attacks on the WP GDPR Compliance plugin.

· 4 min read

WP Edition
Cover story

WordPress 5.0 Reaches Release Candidate

As Gutenberg Passes 1 Million Installs

CoreBeta 3, 4 and 5

DealsWPBeginner Growth Accelerator backs CaseProof and Formidable Forms

WP Edition / Vol. 16 · No. 191 / November 2018

November 2018 was a month of moving dates and rising pressure. WordPress 5.0 went through three more betas, saw its release date pushed from November 19 to November 27 and then left open, and finally reached release candidate status over the US Thanksgiving holiday. By the time RC2 arrived on November 30, the Gutenberg plugin had passed a million active installations.

The project also launched HelpHub, its new home for user documentation, and set a firm end date for official Classic Editor support. Security researchers, meanwhile, were tracking attacks against a GDPR plugin installed on many thousands of sites.

Mergers, Acquisitions, and Investments

  • WPBeginner Growth Accelerator invests in CaseProof and Formidable Forms (November 6): Syed Balkhi’s new fund announced its first round, taking stakes in CaseProof, the maker of MemberPress, and in Formidable Forms.

Beyond that, companies were focused squarely on shipping Gutenberg-compatible updates before 5.0 landed.

WordPress Core Updates

  • Beta 3, 4 and 5: Beta 3 arrived on November 5, Beta 4 on November 13 and Beta 5 on November 16, the last adding permalink editing to the document sidebar.
  • Release date moves: On November 9 the target moved from November 19 to November 27, and later in the month the team said the final date would depend on feedback from the release candidates.
  • RC1 (November 23) and RC2 (November 30): The first release candidate shipped over the US Thanksgiving holiday despite last-minute objections from some contributors, followed by RC2 on the last day of the month.
  • Classic Editor through 2021: On November 7, the project confirmed that the Classic Editor plugin would be officially supported until December 31, 2021, and said the team was considering including it with upgrades to 5.0.
  • Listening sessions and FAQ: Matt Mullenweg held one-to-one office hours with community members and published an extended Gutenberg FAQ.
  • Mobile apps: The mobile team said a beta of the block editor in the WordPress apps was expected in February 2019.

Other WordPress News

  • HelpHub goes live: The long-running project to move user documentation off the Codex reached a milestone as HelpHub became the official home of WordPress Support.
  • Spanish translation record: The Spanish community, with more than 2,500 contributors, translated more of the project than ever, including core, WordPress.org, the mobile apps and the top 120 plugins.
  • Mullenweg at WordCamp Portland: In a Q&A at the end of WordCamp Portland on November 3, Matt Mullenweg addressed the controversies around Gutenberg directly.
  • WordCamp ticket cap rises: Maximum WordCamp ticket prices were set to rise to $25 per day in 2019.
  • Kim Parsell scholarship: Nidhi Jain was named the 2018 recipient of the Kim Parsell Memorial Scholarship, which supports a woman contributor attending WordCamp US for the first time.
  • Figma and WordPress: Figma donated an organizational membership to the WordPress project to improve design collaboration.
  • WPCampus audit fundraising: WPCampus sought to raise $30,000 for an independent accessibility audit of Gutenberg.
  • Quarterly updates: Contributor teams posted their Q3 2018 update.
  • WordCamp Europe 2020: Organizers opened a call for host cities.
  • Theme and plugin readiness: Authors of popular WordPress.org themes rolled out Gutenberg compatibility updates, Automattic promised full support in its free themes including Storefront, and plugins such as NextGEN Gallery and Jetpack 6.8 added block editor support ahead of 5.0.

Security Alerts and Plugin Vulnerabilities

  • WP GDPR Compliance exploited: On November 8, Wordfence reported that a privilege escalation flaw in the WP GDPR Compliance plugin was being exploited in the wild, letting unauthenticated attackers change site options and create administrator accounts. The plugin was patched, but many sites were compromised before updating.
  • AMP for WP campaign: On November 20, Wordfence described an XSS injection campaign exploiting the recently fixed AMP for WP plugin, which had returned to the directory with a patch in mid-November.
  • Lesson of the month: Both incidents involved plugins sold on compliance or performance benefits, a reminder that every added plugin is also added attack surface.
  • Release timing under scrutiny: The decision to push toward a release just before WordCamp US and the holiday season drew criticism from agencies worried about supporting clients through a major change in December.
  • A million testers: Gutenberg passing one million active installs showed that, despite the debate, a large audience was already using the editor.
  • Open source competitors: ExpressionEngine went open source after 16 years, and Drupal prepared its own Layout Builder, showing that other CMS projects were rethinking content editing too.
  • Custom blocks for everyone: New tools such as Block Lab made it possible to build custom blocks without deep React knowledge, lowering the barrier for PHP-focused developers.

Theme of the Month: Storefront

WooCommerce’s official theme, Storefront, was among the Automattic themes promised full Gutenberg compatibility in November. For the very large number of stores built on it, that commitment meant store owners could plan for 5.0 with more confidence.

Plugin of the Month: Block Lab

Launched in November, Block Lab let developers define custom blocks through an admin interface and simple PHP templates. At a moment when many agencies feared they would need to retrain in React, it offered a practical bridge into the block editor.

Host of the Month: SiteGround

SiteGround, one of the hosts recommended on WordPress.org, offered WordPress-specific tooling such as staging and in-house caching. Staging environments were especially valuable in November, when site owners wanted to test the 5.0 release candidates before the final release.

Founder of the Month: Rachel Cherry

Rachel Cherry founded WPCampus, the community for people using WordPress in higher education. In November she led the effort to fund an independent accessibility audit of Gutenberg, turning a heated debate into a concrete plan to measure and fix problems.

Looking Ahead to December 2018

All signs point to WordPress 5.0 shipping in early December, possibly just before WordCamp US in Nashville, where Matt Mullenweg will deliver the State of the Word. PHP 7.3 is also due in December, and PHP 5.6 reaches end of life on December 31. Expect quick follow-up maintenance releases once the new editor reaches millions of sites.

More from 2018

All 2018 editions →
WP Edition
Cover story

WordPress 5.0 “Bebo” Ships the Block

Editor

CoreRC3

SecurityWordPress 5.0.1

WP Edition / No. 192 / December 2018

WordPress 5.0 “Bebo” Ships the Block Editor

WordPress 5.0 “Bebo” made the block editor the default on December 6, 2018, followed by the State of the Word, two point releases and goals for 2019.

WP Edition
Cover story

WordPress 5.0 Beta 1

Twenty Nineteen and WP Engine Buys Array Themes

SecurityAMP for WP pulled

CommunityAccessibility lead resigns

WP Edition / No. 190 / October 2018

WordPress 5.0 Beta 1, Twenty Nineteen and WP Engine Buys Array Themes

October 2018 brought the WordPress 5.0 plan and first beta, the Twenty Nineteen theme, Gutenberg accessibility concerns and WP Engine’s Array Themes deal.

WP Edition
Cover story

WordPress 4.9.9 Gives Way

To a Gutenberg-Powered 5.0

DealsWPForms buys Pirate Forms

SecurityDuplicator remote code execution

WP Edition / No. 189 / September 2018

WordPress 4.9.9 Gives Way to a Gutenberg-Powered 5.0

In September 2018 the core team dropped 4.9.9 to focus on WordPress 5.0 and Gutenberg, while ACF 5.0, a Duplicator RCE fix and the Pirate Forms sale made news.

WP Edition
Cover story

WordPress 4.9.8 Brings the “Try

Gutenberg” Callout

SecurityPhar deserialization research

CommunityClassic Editor support “for many years”

WP Edition / No. 188 / August 2018

WordPress 4.9.8 Brings the “Try Gutenberg” Callout

WordPress 4.9.8 put a “Try Gutenberg” prompt on dashboards in August 2018, while ClassicPress forked core and Oakley Capital agreed to buy cPanel.