WordPress plugin WPVibe passed 100,000 users this month, up from 50,000 active installs at the end of September, and is now listed in Claude's Connectors Directory. OptinMonster launched an MCP server letting Claude or ChatGPT build and manage campaigns. Duplicator took over WP Crontrol from longtime maintainer John Blackbourn and released version 2.0, moving former Pro features into the free plugin. Separately, the PHP team shipped emergency fixes (PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35) for two critical remote code execution flaws, and WordPress released two security updates, 7.1.3 and 7.1.4.
Questions this post answers
Which PHP versions fix the critical remote code execution flaws found in October 2026?
The patched versions are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. The PHP team released emergency fixes after two critical flaws let attackers run code on a server without logging in, and details leaked before the fix was ready. Sites running PHP 8.1 or older no longer receive regular security updates and remain exposed. Developers patching production servers can track urgent PHP advisories like this one on daily.dev.
Does updating WordPress also update my PHP version?
No, updating WordPress does not update the PHP version running on the server. PHP is the programming language WordPress runs on and lives on the hosting server, separate from WordPress core. You can check your current PHP version under Tools, then Site Health, in the Info tab under the Server section, and update it through your hosting dashboard. Site owners untangling hosting and platform updates can follow WordPress and PHP news together on daily.dev.
What is the OptinMonster MCP and what can it do?
OptinMonster MCP is a Model Context Protocol server, nicknamed the 'Monster Context Protocol,' launched on October 27 that lets AI assistants like Claude or ChatGPT manage an OptinMonster account directly. It can suggest the next campaign based on results, build a campaign from a template, set up targeting, explain existing campaigns in plain English, rank campaign results, and copy or pause campaigns across sites. Marketers evaluating AI-driven campaign tools can keep up with new MCP integrations on daily.dev.