Nathaniel Christopher has a lovely recap of his time at WordCamp Canada. Very cool that the dashboard widget helped connect him to the local community. Hat tip: Anne.
Flooding open source projects with AI-generated PRs and issues won’t make you a better engineer, and I don’t think it will help your career either.
It mostly adds work for maintainers, who then have to review and triage contributions that often aren’t ready.
Next year, WordCamp Asia 2027 heads to Penang, Malaysia. From April 9 to 11, the WordPress community will gather at the Penang Waterfront Convention Centre for three days of contribution, learning, and connection. Tickets are on sale and sponsorship applications are open, so now is the time to make your plans.
In 2026, WordCamp Asia brought 2,627 attendees to Mumbai, India. More than 1,500 participants joined Contributor Day, where table leads guided work on more than 20 contribution tables. The conference days that followed covered topics ranging from AI and developer workflows to enterprise WordPress and journalism on the open web, and closed with a panel featuring WordPress Executive Director Mary Hubbard, Peter Wilson, and Sergey Biryukov.
WordPress is not a company. It is a shared commitment to keeping the web open.
Mary Hubbard, Executive Director, WordPress
The mix of hands-on work and big-picture conversation is what sets a WordCamp apart. You learn from the people who build, scale, and maintain WordPress every day, trade ideas in the hallway between sessions, and head home with new collaborators and fresh energy for the work ahead.
Penang offers a memorable setting for WC Asia. George Town, a short drive from the venue, is a UNESCO World Heritage Site, and National Geographic named Penang one of the best places in the world to travel to in 2027. The island is famous for its food, from internationally-recognized street food to fine dining, and it is one of Malaysia’s leading destinations for tourism. If you can, give yourself a day or two on either side of the conference to explore.








A regular ticket costs only USD $35, thanks to our sponsors. It covers both conference days, lunch and refreshments, and the after party. Tickets are released in batches, so buying early secures your place and helps organizers plan for everyone who is coming. Contributor Day on April 9 has its own registration, which opens January 27, 2027. It is limited to 600 participants.

Join Asia’s Largest WordPress Gathering
April 9 – 11, 2027 | Penang Waterfront Convention Centre (PWCC), Penang, Malaysia
None of this happens without sponsors. Their support keeps ticket prices low, backs the volunteers and contributors who make the event run, and helps WordCamp Asia stay true to the values of the WordPress project. In return, sponsors meet an engaged, international audience of developers, agencies, business owners, and creators.
Five packages are available, from a Small Business table to a Platinum booth, so there is a fit for local companies and global brands alike. Every sponsor also gets access to the Career Corner, a dedicated space for meeting and hiring WordPress professionals.
Packages are confirmed on a first-come, first-served basis, so reach out early if your company wants to be involved.
WordCamp Asia is organized by and for the community. Volunteers, organizers, speakers, sponsors, and attendees each shape what the event becomes, whether they are contributing for the first time or reconnecting with collaborators they have known for years.









However you choose to take part, your presence matters. Buy a ticket, bring a colleague, sponsor the event, or share this post with someone who should be there. Each of those choices strengthens WordPress and the people behind it.
See you in Penang.
[00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley.
Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, Drupal funding, community, and a shared journey with WordPress.
If you’d like to subscribe to the podcast, you can do that by searching for WP Tavern in your podcast player of choice, or by going to wptavern.com/feed/podcast, and you can copy that URL into most podcast players.
If you have a topic that you’d like us to feature on the podcast, I’m keen to hear from you and hopefully get you, or your idea, featured on the show. Head to wptavern.com/contact/jukebox, and use the form there.
So on the podcast today we have Tiffany Farriss. Tiffany has spent the last 30 years working in web design, development, and creation, and she’s been deeply embedded in the Drupal community for the past two decades. She’s currently the interim CEO of the Drupal Association and is the organization’s longest serving board member after Drupal’s founder Dries Buytaert.
This episode is a bit of a departure as we usually focus squarely on WordPress, but Tiffany brings a wealth of experience from the broader PHP family, and this conversation explores the similarities and differences between the WordPress and Drupal ecosystems, particularly when it comes to infrastructure and the sustainability of open source projects.
Tiffany explains the maker-taker problem, and the challenges of sustaining free software platforms that end up in millions of sites across the web. She shares her insights on the real costs behind open source stewardship, drawing from both data and experience, and discusses how tiny groups have shouldered the burden for everyone, and why that might no longer be viable.
The discussion explores the Drupal Certified Partner Program, the push towards quantifying contributions, and how the open source community can improve transparency and sustainability.
Tiffany also touches on the role of public sector procurement in shaping the future of open source, the impact of new regulations, and how community driven recognition could incentivize more organisations to buy their round of beers for the ecosystem.
If you’re interested in the sustainability of open source, the evolution of governance models, and how WordPress professionals can learn from the broader PHP landscape, this episode is for you.
If you’re interested in finding out more, you can find all of the links in the show notes by heading to wptavern.com/podcast, where you’ll find all the other episodes as well.
And so without further delay, I bring you Tiffany Farriss.
I am joined on the podcast by Tiffany Farriss. Hello, Tiffany.
[00:03:19] Tiffany Farriss: Hi Nathan.
[00:03:20] Nathan Wrigley: Thank you for joining us. So this is a little bit of a departure. Usually we talk about WordPress. It’s WordPress on the menu every single day of the week. And that is going to be the case, I suspect a little bit today. But there’s also going to be a foray into Drupal because Tiffany is very much connected with the Drupal community.
So Tiffany, really just to get this podcast started, can I just offer you a chance to give us your little bio, tell us who you are and what you do over on the Drupal side, lo these many years. It’s been multiple decades that you’ve been involved in various different ways I think.
[00:03:52] Tiffany Farriss: It has been. Yeah. Thank you Nathan. I’m really glad to be here. I do consider all of us part of the PHP family, whether we’re Drupal or WordPress or Joomla or TYPO3, like I think we all have so much in common.
But I am Tiffany Farriss. I’m currently the interim CEO over at the Drupal Association. I have been involved in web design, development, creation for the last 30 years. And I’ve been heavily involved in the Drupal community for the last 20.
In particular in its governance. I’m the longest tenured board member of the Drupal Association, the 501 (c) (3) that is responsible for the governance. Other than Dries Buytaert, who is the founder of the Drupal Project.
So I’ve been around a long time and I’m currently on leave from my own company, palantir.net to take a year to help Drupal kind of navigate this time of kind of intense disruption, I think it is for all of us. Pretty safe to say, that we are all experiencing the same disruptions from AI. And then just economic pressure in general.
[00:04:50] Nathan Wrigley: So Drupal, I suppose, it would be a good thing to say at this point, Drupal is very similar in its project, in its status, in its goals, in its aims, in its infrastructure and technology to the CMS that most people listening to this are familiar with. It’s a PHP based CMS used by millions of websites all over the world. So broadly it’s the same.
Now you mentioned the foundation. Would you just be able to dig into that a little bit more because that may be confusing for people on this side. There may be some significant differences there. What does the foundation get itself involved with? I know that you described that a little bit there, but if you could go into a bit more depth, that would be great.
[00:05:26] Tiffany Farriss: I do think our governance is one of the places where WordPress and Drupal are a little bit different. In Drupal, we have the Drupal Association, which is an independent 501 (c) (3), which is a US-based not-for-profit. And we have specifically an educational and scientific mission that we’re authorised to do.
We run Drupal.org. We run all of the infrastructure. We support all the security coordination. And we are responsible for Drupal Cons around the world. We do have a founder as well, right, Dries, and he is currently the Executive Chairman of Acquia. But Acquia doesn’t have the same single privileged actor role, that say Automattic does in the WordPress community.
Dries serves on the board, but he doesn’t control the board and he doesn’t control any of the technical steering committees, although he is still the founder and the lead of the project.
[00:06:17] Nathan Wrigley: Okay. So there is a significant difference there, isn’t there? That’s kind of interesting.
[00:06:20] Tiffany Farriss: Yeah.
[00:06:20] Nathan Wrigley: Okay, we’ll dig into that in a moment. However, in the preparation for this podcast episode, Tiffany was very kind to send me three things.
One of them was a YouTube video. It runs to about 20 minutes and sort of summarises what we’re going to talk about, I think, fairly well.
Another one was a blog post that you wrote in June of this year. It’s called Freedom is Not Free, A model for Open Source Sustainability. Again, very much aligned to what we’re going to talk about. That’s on palantir.net, which I’m at pains to point out is not the palantir that you are probably thinking about when you say the word palantir. And there’s another one which again, tackles the same subject, written broadly the same time. It was July this year, written by Dries, the founder of Drupal.
And what we’re trying to deal with here is, what I think Dries has summed up in the past is this maker, taker problem. And it’s very difficult to summarise. I must confess, I genuinely cannot articulate this problem. No matter how many times I’ve tried to articulate it to friends, to colleagues, to relations. At some point I get lost. At some point, the dynamics of it and the argument of it kind of boils boils down to it’s a moral thing.
So I’m just wondering, could you paint the picture of what you were trying to say in that YouTube video and in your blog post. What is the open source sustainability problem that you think, amongst many others, we have at the moment?
[00:07:47] Tiffany Farriss: We like to talk in open source about free and the four freedoms, especially for projects that are based in the GPL, right? But one of those freedoms, I think it comes down to the idea of the word free, right? There’s free is in speech. Where I am free to say what I want and when I want, and accept the consequences of that.
But then there’s also this idea of free as in beer. And the reality is that the beer was never free. And the problem we have in open source is that for the last 25 years of Drupal, a really small group has been buying the rounds of beer for an entire ecosystem. And what I’m saying is that, beer has never been free. You just haven’t been taking your turn at buying the round, right?
So as we deal with kind of the pressures of the current economic situation, the uncertainty and opportunities created by AI, the number of people who are still buying those rounds is dwindling. But there’s still a lot of people who want to drink that free beer. There’s still a tonne of people who use WordPress, a tonne of people who use Drupal and get a lot of value out of it, right? They’re enjoying that.
But what the problem is, is that we have this open source licence, and the licence is what conveys the freedom, right? It makes the code available. And in open source the more people who use the code, the cost of that code goes to zero. And no one’s use of the code is diminished by someone else also using that code.
However, there’s more to being an open source project than just the code. And this is where the concept of stewardship comes in. Stewardship is what makes it dependable. It’s what has made it so that millions of people around the world can feel confident in downloading the software, using the software, hiring someone to create a WordPress or a Drupal implementation for you.
And that stewardship includes things like code hosting, or packaging. Testing frameworks. The security coordination. All of those things, which as more people use it become more expensive, not less.
So, there are these tensions around people who are getting value from open source software, but who currently don’t help pay for the cost that they impose on the project, largely because it’s invisible, right? So I think the first step is that we need to make those costs much more visible. So that’s something I’ve been working on in Drupal for a while. And so I want to expose it, right?
We have 2,800 organisations in the last year who contributed into Drupal, but under 5% of them did two thirds of it, right? There are, I think as in WordPress, you know who really is driving and doing the work. And we do too, right? Obviously in Drupal we know who that is. And because we know who they are, and we know that they’re invested, and that they are passionate about open source and our project. They’re the ones who are easy to ask for financial contributions, or sponsorship to Drupal Con.
So you keep going back to the same pool. And in Drupal’s case, that means that 94% of our financial contribution comes from this tiny group of 5%. So they’re buying the rounds of beer for everyone. And that’s not a sustainable proposition.
[00:11:00] Nathan Wrigley: Do you think, I’m going to rewind the clock a little bit. So, I regard the internet as an ongoing experiment. Where we are now is definitely not where it’s going to end up. And where we were 10 years ago, I don’t know that anybody would’ve predicted that we’d end up where we are today. You know, the internet came around and it evolved in the way that it did.
Do you see in the last, let’s say 25 years that many people have had access to the internet. Can you see moments where, and I’m doing air quotes, mistakes were made, which led to this problem? Or was it just happenstance and serendipity? We just got to this point? There’s no real pointing of a finger. There’s nobody to blame. There’s nobody to say, okay, you made dreadful mistakes. It’s just the way it evolved. There’s no question there, but do you understand what I’m saying?
[00:11:49] Tiffany Farriss: I do.
[00:11:50] Nathan Wrigley: With the benefit of hindsight, can you look back and point the finger, or is it more a case of okay, let’s just deal with the reality of where we’re at now.
[00:11:56] Tiffany Farriss: I can point to that moment. I was on the board at the time when Drupal moved over to Composer, right, and to modern packaging. And what I can tell you is that the board was never, wasn’t a big deal, right? They came to the board and I don’t even think we were really notified that this was happening or what it would mean.
And nobody modelled that packaging costs scaled to infinity, the more people who use it, right? There was no financial model put around it. We became a utility as opposed to just a repository. And I think that’s the moment for us that really changed things. You can continue to run events, Drupal Cons and Drupal Camps and all of that stuff. Those have pretty known economic models, and you can continue to run a website that promotes things. And you probably could even continue to be a collaboration platform.
But once you start to become a packaging utility, then you become part of everyone’s infrastructure. And if you start to provide that for free, and people will expect it to continue to be free. And so I’m, really it’s only in the last couple of years that I’ve started to look into those costs. And for Drupal, we provide the Drupal Association itself provides $10 in services to every site, every year, every modern Drupal site every year.
[00:13:16] Nathan Wrigley: Oh, that’s an interesting stat.
[00:13:17] Tiffany Farriss: It is.
[00:13:18] Nathan Wrigley: You’ve figured that out, you’ve done the maths and it costs $10 for every Drupal site that exists, whether or not they pay anything? That’s such an interesting number.
[00:13:26] Tiffany Farriss: Isn’t But I actually only take in $7.50. So I’ve been pushing forward in technical debt things for years. And that’s a risk, right? That’s a risk for me. And it’s also just unpleasant. I think that if we all start to become a little clearer around what the costs are as a utility, it’s actually not a lot.
When it goes unpaid, it does have a cost, a compounding cost. And in Drupal’s history, what we used to say was if you want to support the project, support the conference. We all learned, obviously, during the pandemic that having an economic model based around a conference wasn’t the best choice.
I still think our ability to get together in person as a community is incredibly valuable, but I don’t see it as the way that we make the money to support the infrastructure. I really don’t like this idea that our revenues, and our expenses are so decoupled like that. And I think that’s really charity thinking.
And part of what I’m working to do is to evolve it into utility thinking? For a couple of reasons, right? One, it’s, not a charity. We are providing a service that people build businesses on, and they expect it to be there. But then also, especially in the case of Drupal, we have such a huge footprint in public sector work, and very large enterprise level government sites. And institutional sites, things that people need to have enterprise level expectations of. And they do, they hit our infrastructure every 15 minutes, right?
Procurement has no way to pay either a community or a charity. However, they can pay for their costs if you can explain it to them in a cost recovery model that this is your share. And I want to be clear, as I talk about what the Drupal Association provides, that leaves aside the volunteer labor for what I like to consider the operational roles that also exist as a part of stewarded open source. Which are the release management, the security team, all of that work that we’re all so very hyper aware of after last week, that also has a cost.
So beyond the $10 that the Drupal Association is providing, there’s $30 provided just by the community as a keep the lights on sort of level. If we had to boil it down to its essence. Beyond what it takes to scratch your own itch, right?
We all know that open source succeeds because I needed to write a module for this, I want to extend that. There are operational roles that aren’t actually in someone’s self-interest to perform, or to underwrite, if you’re an organisation. And so quantifying it has been something I’ve been working on for the last couple of months. And so we’re working now with this $40 a year figure around the services that are provided in addition to the code, that we don’t have to, right? The licence says it’s used as is, but nobody actually does that.
[00:16:08] Nathan Wrigley: No. Okay. That’s an interesting thought. I’m just going to pivot ever so slightly and just talk about the community that you’ve got. I imagine it maps broadly to the community that we’ve got. Do you find having these conversations is challenging? Let’s go with that word. Because over on the WordPress side, is a reluctance for many people in the community to bring money into the conversation at all. You know, it is just almost a taboo in many senses.
And obviously you are pioneering this, the word dollar comes out a lot. You know, you’re actually putting specific numbers out there quite a lot. What’s the pushback like over there? Are there two camps? It’s like the “we’re never going to do this, is crazy,” and the acceptance? Or is there some sort of homogenous bit in the middle where people are starting to realise, okay, Tiffany’s making sense, this adds up. This is what we need to do in 2027, 2028.
Basically, how’s it going? How much pushback are you getting from your community?
[00:17:02] Tiffany Farriss: I think Drupal is a little bit different than WordPress because we don’t have a paid plugin economy. All modules are GPL’d and they’re free. So anyone who is working on Drupal has no direct way to monetize it. And I think that has made this conversation, this recognition a little bit clearer, right?
Our entire economic base of support has been from a lot of the agencies. That’s the segment of our entire ecosystem that’s under the most pressure right now, and so if I say to them, I think we need to stop asking so much of you and we need to start asking more of the others in the ecosystem. It’s been a little bit of a recognition, like yeah, maybe that’s true.
Our ecosystem, our agency ecosystem, they give well beyond what they take from Drupal. And so I think for me, quantifying what just the general site takes from Drupal, has made it really sharp and clear that this isn’t a huge ask. And maybe the labor costs, maybe the infrastructure costs. It is time for us to be able to mature, and to recognise that more people need to be involved in supporting that.
[00:18:09] Nathan Wrigley: I know that you are not involved in the WordPress space in the same way that you are with Drupal, but I’m just wondering if, from what you’ve just said, it sounds a little bit like you have more of a bat-phone into the people who need to be on side. In the WordPress space, I feel like there may be more people who, I don’t know, they own a plugin business, and they make money in that way, but they might contribute nothing back to the community.
There’s people who turn up to events, there’s people who own hosting companies. They’re all spread out in different ways, and earning money in different ways. And so when messaging about, I guess our equivalent would be called Five For The Future, it’s very hard to know where to put that messaging, because you can’t really sum up where these people all are. They’re all over the place and there’s no one place where they gather.
But it sounds a little bit like, and I said bat phone, I hope you knew what I meant by that. It sounds like you have a line of communication which is much more easy to tap perhaps than we do on the WordPress side. If I’ve misunderstood that, please say.
[00:19:10] Tiffany Farriss: I think I do feel like we have a lot of engagement from a lot of the organisations. One of the major changes that Dries put in place back in 2014, was our contribution system. And so we know, it’s public, who is contributing to Drupal, and that’s not unique to us.
But I think the innovation is that every commit has the opportunity for an organisation as well as a sponsor. So when work is done in Drupal, we do have a lot of telemetry around who’s doing that work. So I think that’s given us insight into where some pieces of the value have been experienced over the last 25 years.
And so we’re able to recognise that. But I do think we over index on those agencies who are involved. And so have a lot of, currently we have a Drupal Certified Partner Program, where a lot of those agencies participate. And they know that they’re supporting and underwriting the infrastructure and they take a lot of pride in that.
I think the difficulty is that one, we’re not a 501 (c) (6), we’re not a trade association. So I can’t deliver benefits specifically back to that group. You know, I can’t go out and say to procurement agents, “hey, you really should drive business to these folks. These are the ones who are actually supporting and working on Drupal,” because it feels like a pay to play. And in our case, there is some payment there, but it’s really you can’t become a Drupal Certified Partner without having made the maker contributions, you know?
[00:20:32] Nathan Wrigley: Oh, so there is a sort of quid pro quo there. If you contribute, I don’t know what the specifics are there, but if you manage to get over whatever the hurdle is, you can then access something. What is the something there that you can access? Sorry, I interrupted.
[00:20:48] Tiffany Farriss: Nothing. There’s nothing you can access, right? I mean, we recognise our makers on our website as Drupal Certified Partners.
But I do think that because it’s just a wall of logos, and it isn’t actually an attestation, it’s a lot of marketing copy, right? It becomes hard for procurement to put any credibility in it. And so this is actually the big innovation that I’m working on involving the Drupal Certified Partner Program, which is largely built around those agencies into a Drupal Certification Program that encompasses our entire ecosystem and essentially sets the standard.
[00:21:21] Nathan Wrigley: Tell us a little bit more about the things that you are doing there then. Because that sounds really intriguing.
[00:21:25] Tiffany Farriss: Yeah, I think that what I recognised is that as a 501 (c) (3), one of the things I can do is I can recognise those who are being good citizens. Now we have to come up with what that standard is. And I think in open source, it’s something that you know, but maybe hasn’t been articulated.
And part of that process has been to recognise that there are three pillars of contribution that are all essential for Drupal to be successful.
First is making, those who are actually contributing code, or code adjacent activities to Drupal.
Patronage, right? Those who are actually funding the infrastructure. Funding the core release managers, the core maintainers, the security maintainers.
And then there’s also advocacy. Helping the world to understand what Drupal is and what it does, and to create the documentation, and to go out to events, and to help others learn to use it.
So those are the three pillars of success. And so what we’re doing is we’re taking that idea of the contribution credit that we’ve had for a long time, which has always recognised more than just code contributions, and explicitly breaking it into these three areas.
And then our Drupal Certified Partner Program has been about agencies. So the eligibility requirements for who we recognise were based around what agencies already were doing. And what we’re evolving that into is different kinds of certification for all the parts of our ecosystem.
So we have platforms that are specifically Drupal tuned. Our platforms as a service partners. We have shared hosts. There are cloud hosts. There are infrastructure CDNs. There are end users. There are individuals. And so that entire spectrum of who’s participating, and getting value and benefit from Drupal, I want to create the opportunity for them to become Drupal certified.
And what that means is that Drupal certification is a badge of recognition of those who are engaging with Drupal in a net neutral, or net positive way. That they’re giving back at least what they are taking from the community, or more.
I think we start to move from something that is more like a sponsored badge wall, into a public trust register, which I think is, very helpful. And I, currently on Drupal.org, you can look up any individual, or any organisation, and you can see how they contribute. But unless you’re super in the weeds, it doesn’t mean much to you.
So I think that the lever here is around procurement, and around making this a trust ledger, something that can’t be bought. But something that is understandable to a procurement officer to say, who is contributing to Drupal? What are they contributing to Drupal, so that they can make decisions. Especially if they have two different potential vendors. One who contributes and one who doesn’t.
I think this is all a conversation we can now have because of the way that Europe is leading the way with their open source strategy. You know, that they want there to be more open source used in the services that they provide. From a digital sovereignty perspective, it’s essential for them.
[00:24:18] Nathan Wrigley: Let me see if I’ve understood that correctly. So on one level, I’m just going to use the word Brussels. I hope that everybody understands what I mean when I say Brussels.
[00:24:25] Tiffany Farriss: Yeah.
[00:24:26] Nathan Wrigley: So, Brussels encapsulates the EU, the governance of the EU. Because of the posture that Brussels takes. It could, coerce is the wrong word, but let’s go with that. It could apply a certain degree of pressure to big procurement initiatives to say, look, I don’t know, we need a new website for the French Health Service or whatever. And Drupal is right in there, and we’re looking for organisations that can help us to build that Drupal infrastructure.
Given that’s the case, we are now going to go to this extra layer of what do these agencies that are competing for this contract, what is their position vis-a-vis Drupal? And if it looks good, in that you’ve contributed in the past and you have all the accreditation and what have you, you will more likely have a favourable outcome in that procurement procedure. Did I sum that up right or have I completely misunderstood?
[00:25:22] Tiffany Farriss: No, I think that’s a part of it, right? I think that Brussels has already recognised that it’s in their interests to use open source products, right, open source solutions, and has for a while. But I think procurement’s the real lever where we start to enshrine or encourage bad behaviour, right? What we were calling extractive use of open source.
So if you think of open source as just lumber that you can take and use however you want, right? If nobody is replanting the trees, cutting it down, sawing the boards, then it doesn’t exist anymore, right?
And also on the government side, when we talk about public money, public code. It’s important that you actually get the benefits of it. So it wasn’t just a starter kit that you take and then you own, right? We know that good use of open source, whether it is WordPress or Drupal or TYPO3, right? You want to minimise the amount of code that you own. That’s the advantage. That’s how we all experience the network effects.
So you need to have some behaviours, and I think that procurement officers don’t care, don’t need to know, about what open source is or our specific projects. But what they need to know is that when they are procuring any project, or any solution, that has open source as a component of it. That open source isn’t going to end up being code that they own down the road. They have the right to use it, extend it forever, and they know that somebody can’t turn it off on them, which is I think a very important.
[00:26:48] Nathan Wrigley: Oh, big thing at the minute.
[00:26:49] Tiffany Farriss: Big thing right now, especially in light of the 2018 USA Cloud Act, right? So that’s really been the driving impetus around digital sovereignty. But when we think about good open source use, responsible open source use, there are some behaviours that regardless of project we know are true.
And it is that when you write a new plugin or module, you release it, right? So others can use it so that you’re sharing the maintenance burden moving forward. If you don’t, then you own that and you’re going to maintain those lines of code yourself.
Two, if you patch something, you want to release that patch upstream because otherwise you may have ended up inadvertently forking it. Or in some cases the government pays for the same patch over and over and over again, right? If there are economic benefit to using open source, you need to know that whatever vendor you’re using is contributing the patches back upstream so that you continue to stay, anything that’s non-confidential, obviously, but so that you can stay current and up to date, right? Woe for those who were not current and up to date last week with PHP, right? It made that problem all the more difficult.
So when I think about making it open source use at the government level very sustainable, there’s really three policies I think that they need to implement to help really get the benefits of open source, right?
One is that the patches are contributed upstream if they’re non-confidential within 30 days.
Two, I think that they need to understand that there is a cost to their use. And so creating whether it’s 2% or 5%, creating a line item in every project that uses open source of any flavour, for the delivery of the project, that there is a standard percentage that is contributed back upstream to that open source project, to offset that use. Because right now, the agencies and the companies that are responsible open source users, they bear their contributions and their participation in open source as a tax. So it becomes baked into their hourly rates. Which then as economic conditions get constrained, it becomes a disadvantage to do the right thing for open source.
So I’m very worried about that. But if it is instead a flat line item that all who are responding to a tender have to meet, then the virtuous behaviour that continues the virtuous cycle of open source isn’t a burden on any one firm.
And then the third piece is you want to know, are they a contributor to that open source project? And so this speaks right to Dries’ maker taker dilemma, which I’ve extended to the maker taker faker dilemma. Which is obviously, I think makers and takers are pretty clear, right? You either are someone who’s making and contributing into your open source project. And takers being the ones who are like, thanks for the wood little elves who magically made it in the woods. Great. This is all good. Good luck with that forest.
I think that the fakers are, in some ways, much more dangerous, because they have this, it’s like open source washing. The fakers are the ones who maybe sponsored a coffee one time at an event, but they’re not really giving things back. So they’ve got a badge. Procurement, they can say, oh look, I’m a sponsor.
I appreciate anyone who sponsors at any level. But I think that when you’re talking about competing on a public procurement, there is a very important difference between someone who maintains modules, contributes to the security team, and someone who sponsors a coffee. And I think that it’s on us as open source projects to make that clearer.
So the Drupal certification is our attempt to really become a very trusted public ledger about who’s contributing what, and why it matters to folks who aren’t in our community. I think today, where we stand and where we’re starting, it is a very transparent ledger. But there’s a difference between transparency and clarity. And I think if we want Brussels, and other governments and procurement, officers to be able to differentiate and give a preference to those who are good open source citizens, if you will, those who are actually involved in the projects that they’re using and implementing, for these very important public projects, I think it’s on us to make that easier. So that’s something I’ll be focused on next year.
[00:31:02] Nathan Wrigley: It sounds to me like you could kind of sum this up in the word clarity. Everybody needs clarity. Those people who are procuring things need to be clear on what they’re going to get. Those people who are delivering things need to be clear on what they’re going to do. And the notoriety, for want of a better word that they’re going to get from that.
It also seems like you are in a very interesting role, where you are like this go-between between all the people doing the work on Drupal, and the people who are procuring, and I’m sure that’s really fascinating work. Like what is the proclivity of, let’s say for example, USA or Canada. What are the requirements that they have around, I don’t know, 20% of all public software needs to be open source or something like that. That must be utterly fascinating work. You’re right at the chalk face of all this. Wow, that’s so interesting.
[00:31:52] Tiffany Farriss: It’s absolute candy to my brain. Like I just, I can’t tell you how much I really am enjoying being part of those conversations. And I never would’ve thought that I would’ve been invited to speak at a plenary at the United Nations, and yet I was. And that blog post that you mentioned, that’s on palantir.net, actually those are remarks I gave to the German Consulate, in New York, right?
It all comes from this conversation we’re all just starting to have about what does it mean to sustainably and responsibly use open source as we look ahead to the next 25 years, next a hundred years.
There was a board member I had served with in Drupal a long time ago, Donna Benjamin, and this was, I don’t know, maybe almost 20 years ago now. And she always used to say, what’s our a hundred year plan? And at the time, I was taken back. I’m like, uh, I can’t even with that.
And now as we fast forward to where we are today, I actually can start to see that. And it’s about understanding that nobody intends and sets out to be a taker, right? You can’t pay for things that you don’t know are there, or things you don’t know are already happening. And you can’t meet expectations that aren’t communicated.
So this is the opportunity for open source projects to say, this is what it takes for us today. This is what it takes for us where we want to go. And here’s your share of it. How do we make it easy, and expected that everyone does a little, so we’re not resting on a few who have to do a lot?
[00:33:22] Nathan Wrigley: This is going to sound like a really poor summation of it, but it feels like open source, up until this point, you know, the analogy, carrot and stick, you know.
[00:33:30] Tiffany Farriss: Yes.
[00:33:30] Nathan Wrigley: So the carrot is, we hope that you’ll come along and, you know, follow the lead and do all of the right things. Where a stick is more, if you don’t do the right thing, there’ll be a punishment for that. It feels like open source for the last 20, 25 years, there’s been more carrot than stick. And although it’s incorrect to summarise this as stick, is there a little bit of stick here? Are we trying to cast a, let’s say, a glowing light on those that do everything well, who are the makers? You know, we want to raise your profile, shout from the rooftops that you did things well.
Conversely, is there a bit of okay, those that don’t, we are going to shame. Or is it more a case of we just leave you alone? You just don’t get a mention. You don’t get to be part of the community in quite the same way.
[00:34:15] Tiffany Farriss: Coming back to that frame as open source stewardship as a utility. Nobody considers it a donation to their electric company. They pay the bill because the lights matter. And I think it’s about resetting this frame. We’ve never sent utility bills to people. We’ve never even exposed what that looks like, or maybe we don’t know ourselves. Based on projects, Drupal certainly didn’t until I started this work.
So I think that there’s this expectation that we’re going to continue as we always have on this balance of goodwill and volunteerism. But as last week showed, PHP Foundation, which WordPress is very involved in, Drupal as well, has one full-time employee. And 70% of the web runs on it. So it’s something that we have taken for granted for too long. And I think that this moment is brokered by the blessing and the curse that is AI.
[00:35:07] Nathan Wrigley: I wonder if the wider issue at stake really is notifying the general public. Letting all of humanity know that when you are picking up your phone and using that app, and it’s connecting with that service over here to enable you to, I don’t know, book a restaurant or get a taxi. There’s probably some layer of free software around there.
And would you do anything for free? Is that, I’m not asking you that question by the way. I’m just saying, you know, dear app user, would you do things for free in the same way that you’re expecting this software to be free?
And I think that argument’s fairly persuasive, but it’s not something that has leaked out into the public. You know, the coverage of the PHP thing, nobody knew. The guy that came on the BBC, who was the BBC correspondent, he’d never heard of PHP. And he’s the cybersecurity correspondent for the BBC had never heard of PHP.
And so getting it out into the vernacular, getting it out into the mainstream, that all of this stuff that you’ve taken for granted, we all need to pay a little bit. I wonder if that’s an interesting. It’s like the stick that I was talking about earlier. If the public are more aware whether they will be able to pressure things a little bit more. I don’t know. I’m not sure there’s any mileage in that, in all honesty, but it’d be an interesting experiment to run.
[00:36:20] Tiffany Farriss: I think we’re about to see that experiment, right? So the Cyber Resilience Act in Europe is requiring SBOMs, which are Service Bill Of Materials to be disclosed. And I think that once SBOMs are readily available, it may become clearer, at least to decision makers, exactly how much open source software is in the solutions that you’re providing. And I really am curious to see how it evolves when you do have these manufacturers or organisations, whether they’re service organisations or actual manufacturers, starting to become liable for the risks in your security chain.
[00:36:56] Nathan Wrigley: Right.
[00:36:56] Tiffany Farriss: As I look at this, I look at it as a supply chain issue. And so we’ve now exposed that there are weaknesses in our supply chain. So the argument isn’t, it’s really less of a shaming. It’s saying hey, this is a risk management approach. And I was looking at it as a design flaw. That open source was an idea around writing software. It wasn’t actually envisioned at any time that this was going to run the world. It was just, this is a good idea to do good way to do things. Let’s try it.
But now that we understand that open source does run everything, we need to come back and treat this as a design problem and say, how do we align the incentives? What needs to be true?
I appreciate the work that’s going on in Europe right now, and I think that becomes a bit of the stick. It’s not coming from us. It’s saying, actually if you sell a product that’s based on open source, and that open source has a security issue, you are liable. You’re the manufacturer. See, as an open source steward, the Drupal Association does not have liability. We have responsibilities to disclose, which we have done, all the way back through 2007.
Drupal is a CNA, right? We’re a numbering authority for CVEs. We’ve had a very mature security practise for many years, and we will continue to do so, and meet our CRA disclosure requirements. But those who have blindly been using open source in products or in services for others, they’re now manufacturers. And come December of next year, they’re really going to start to understand how liable they’ve become for any issues in the supply chain.
[00:38:34] Nathan Wrigley: There’s something quite virtuous about that. In that it’s allowing the open source posture to carry on in the same way that it always has. Shifting the responsibility over to the governments in a way. You know, that they’ll create the legislation, which means that if you fall foul of this, that and the other thing, you will now be responsible. And if you are responsible, it’s it’s the same reason we have car insurance and buildings insurance. You need to know what your position is going to be in the event of a fire or a crash. You just have to know it. Because if your business were to go under because you weren’t thinking about those things, that would just be negligence. And so that’s such an interesting way of framing it. I like that a lot.
I also like your definition there. You described the internet over, you know, the last 20 years and how nobody knew that it was going to work this way, and now here we are. And, I guess it would be a bit like, I don’t know, going to a lemonade stand or something like that and getting a really cheap lemonade from a child who’d done it because it was a nice thing to do for the community. Let’s sell cheap lemonade.
But then turning up with 12,000 people and saying, we would like 12,000 cheap lemonades, please. Immediately. No, that’s not available. That’s not the way it was designed. And that feels to have certain overlaps here.
Nobody knew that open source was going to take over the world. Now it has. It’s chronically underfunded. There will be a collapse at some point if companies and businesses are allowed to just have a taker mentality. So you are putting things in place to make sure that is checked. And I think that’s really interesting.
[00:40:06] Tiffany Farriss: It goes from this idea that we passively consume whatever we get. Whether it’s a website or a phone. To this idea of having some sort of active upstream strategy. And again, I don’t think that many of us had the opportunity to understand what software was running on our phone. You didn’t know, right? You can’t mitigate a risk that you don’t know is there. I do think it is unreasonable to think that we don’t know the risk is there now, especially after last week.
[00:40:33] Nathan Wrigley: There’s just no bit of me which would walk into a store and pick things up and just wander out and say. There it is. I’m going to have it because it’s there for me to take. And yet, broadly speaking, I think it’s fair to say that the vast majority of the people in the world consuming things on the internet have exactly that position.
You switch on the device, the device itself is probably working on, in many cases, open source software. And then I’m just going to consume all the things that are there, you know, it’s all free. You know, it might not be free, it might be sponsored by advertising or what have you know, we all have opinions on that.
But we have got ourselves into this position where we completely pick up the devices and think, all free, from top to bottom, free. And we need to change that mentality. So, going back to what I said earlier, getting the message out to the population at large, I don’t know how you do that.
[00:41:25] Tiffany Farriss: I’m a big believer in what Buckminster Fuller called the trim tabs, right? I don’t set out to turn the ship. I turn the little piece, the trim tab that turns the rudder, and that turns the ship. And I think that whether we’re talking about compliance, or we’re talking about OSBOs, and helping compliance within organisations, I think that’s how we turn the ship, right?
We need to create an economic model that really does protect the supply chain. This is a consumer problem. It is a consumer risk. And I think that’s exactly what many governments were set up to deal with.
And so I think they do have the opportunity that the governments, whether it’s the EU or the US or the Canadian government, they spend so much money. And if they change the way that they spend money, and they change the way that they look at open source and how they understand it. And to be a responsible open source consumer, who’s asking for, are we giving back? Are we minimising our footprint? Are we restoring services that we use? Are we treating it like the utility that it is? That alone makes such a huge difference, such a huge difference.
And helps us to move away from this idea of licence only open source economics. Which is essentially that idea that I’m just going to take it because the cost of code go to zero over time, right? That’s not it alone, right?
We expect that when someone finds an issue, especially an issue that can cause remote execution, right? That they’re going to tell us about it. That they’re going to fix it. And that we’re going to be able to have access to that fix. And that’s where we move beyond this idea that the licence itself is free, and it will be free forever.
Those services that is about the human capital, and the human technology that make those things possible. And they are not free, they have never been free. You just haven’t known who was picking up the bill on your behalf.
[00:43:17] Nathan Wrigley: What kind of timeframe? This is going to be my last question by the way. What kind of timeframe do you put on this. How far into the future are you gazing? I’m guessing the answer is it’ll never be complete, this work. But how far into the future are you hoping to get so that you can look in the rear view mirror and say, yeah, we’ve achieved most of what we wanted to do there.
[00:43:37] Tiffany Farriss: Because we’re kind of on forefront here in having these conversations, and we’re certainly not alone. Every one of the open source foundations is having some version of this conversation, or some approach that they’re trying, to make sure that they have the base of support that is commensurate to the folks that they serve, right?
I really am approaching this as a pilot for the next six months, and seeing can we, as we broaden and understand different segments of our ecosystem, and the ways in which they can contribute that align with their interests, right? I’m always looking for the triple win. The win for Drupal. The win for the end agency. And the win for the public, right? Because I am a public facing charity, right? I want all of those things to be true.
And I’ll be experimenting and having conversations with infrastructure providers, with our shared hosting platforms, with cloud providers to say, okay, what does it make sense for you to contribute? What does it mean for you to be a good Drupal citizen, and to give back in a way that feels appropriate to the amount of value that you’re generating from this?
I don’t think that any system can be designed where it requires a hundred percent good behaviour, or a hundred percent participation. It’s going to be a process of iteration and learning as fast as I can. Making sure that we’re being transparent about it, and approaching it from this cost expensing perspective. I’m not looking to maximise profit or other things. I’m a not-for-profit, and I care about resources, and money, and attention going to Drupal. If it comes to the DA, through the DA or directly into the Drupal community, all of those states are a win.
So it creates a great table for conversations with different kinds of players and providers who haven’t engaged. But at least now I can go to them and say, hey, this is what you’re already consuming from our ecosystem. And here’s a pretty good back a napkin for what I think you’re making from it. If we didn’t exist, what would you do? How would you do the security pieces? How would you do the packaging pieces?
And it’s okay if one of the answers in those conversations is, oh, wow, I didn’t realise we were using so much. We can dial that back. That’s perfectly valid. I want to make sure that open source and that Drupal is there for whoever wants it in as secure and as innovative a way as possible.
And so whether you reduce how often you ping my packaging server or you are like, yes, I need this, this is part of my critical infrastructure, and you fund it as if it is a utility part of your infrastructure. Both of those are valid answers to me.
[00:46:03] Nathan Wrigley: There’s so many people in the WordPress space who will resonate with everything that you are doing here. I said I was going to ask no more questions. I have one more. Do you have lines of communication open with, for example, WordPress and maybe PHP? Are you doing this very much in isolation, even though there may be overlaps? Do you have that? Would you welcome that? Would you like to have introductions to people? And if so how can people communicate that to you?
[00:46:29] Tiffany Farriss: I’m always happy to talk to everyone. I will say Drupal and Joomla, WordPress and TYPO3, we have the Open Web Alliance, and so we do talk every month. And we’ve just invited PHP to be a part of that obviously. I have Slack access to all of those folks and we do talk regularly.
In addition, there’s just a broader open source community of leaders. There was the Open Source Congress, that happened in September. I really appreciate being able to talk to my colleagues whether it’s RubyCon for the Apache Foundation, which actually put on this year’s Open Source Congress and did a fantastic job. All of us being able to talk together.
I can say to the CEO of Python, I can say, oh you know, hey what lawyer are you using right now? Or what software did you use for your community elections? I’m looking for some new ones, right? And they have tonnes of ideas and then I’m able to say, oh, here’s how we are doing this, or here’s how we’re doing that. And I just think that level of collaboration and conversation, has been incredible. Right. Rust Foundation, UN Open Source Week and the EU Open Source Week, and Open Source Congress. Those conversations among colleagues have been fantastic.
Any new colleagues I’m happy to talk to as well. You can reach me on many different Slacks, whether it’s the Open Source Congress Slack, or the Alpha Omega Project for Drupal. I’m in Drupal Slack. You can reach me in all of those places, is @Farriss. That’s FARRISS.
[00:47:51] Nathan Wrigley: Nice. Thank you so much. It really is fascinating work. I would really be genuinely curious to watch what you are doing over the the next six months. Where you end up. How the project is received at both ends.
[00:48:04] Tiffany Farriss: Me too.
[00:48:04] Nathan Wrigley: To see what the pushback is like. I would really love to keep a track of what’s going on. But for now, best of luck. I hope that it all pans out in the way you’re anticipating. So, Tiffany Farriss, thank you so much for making the time to chat to me today.
[00:48:16] Tiffany Farriss: Nathan, thank you for having me.
On the podcast today we have Tiffany Farriss.
Tiffany has spent the last 30 years working in web design, development, and creation, and she’s been deeply embedded in the Drupal community for the past two decades. She’s currently the interim CEO of the Drupal Association, and is the organisation’s longest-serving board member after Drupal’s founder, Dries Buytaert.
This episode is a bit of a departure, as we usually focus squarely on WordPress. But Tiffany brings a wealth of experience from the broader PHP family, and this conversation explores the similarities and differences between the WordPress and Drupal ecosystems, particularly when it comes to infrastructure, and the sustainability of open source projects.
Tiffany explains the ‘maker-taker’ problem and the challenges of sustaining free software platforms that underpin millions of sites across the web. She shares her insights on the real costs behind open source stewardship, drawing from both data and experience, and discusses how tiny groups have shouldered the burden for everyone, and why that might no longer be viable.
The discussion explores the Drupal Certified Partner program, the push towards quantifying contributions, and how the open source community can improve transparency and sustainability. Tiffany also touches on the role of public sector procurement in shaping the future of open source, the impact of new regulations, and how community-driven recognition could incentivise more organisations to ‘buy their round of beers’ for the ecosystem.
If you’re interested in the sustainability of open source, the evolution of governance models, and how WordPress professionals can learn from the broader PHP landscape, this episode is for you.
WordPress 7.2 Beta 5 is ready for download and testing!
This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features.
You can test WordPress 7.2 Beta 5 in any of the following ways:
| WordPress Beta Tester Plugin | Install and activate the WordPress Beta Tester plugin on a WordPress install. Select the “Bleeding edge” channel and “Beta/RC Only” stream. |
| Direct Download | Download the Beta 5 version (zip) and install it on a WordPress website. |
| Command Line (WP-CLI) | Use this WP-CLI command: wp core update --version=7.2-beta5 |
| WordPress Playground | Use a 7.2 Beta 5 WordPress Playground instance to test the software directly in your browser. No setup required-just click and go! |
The scheduled final release date for WordPress 7.2 is December 8, 2026. The full release schedule can be found here. Your help testing Beta and RC versions is vital to making this release as stable and powerful as possible. Thank you to everyone who contributes by testing!
For technical details on the issues addressed since Beta 4, see the following links:
WordPress 7.2 Beta 5 continues refining the upcoming release with additional security, accessibility, and compatibility improvements.
Recent changes include email notifications when application passwords are created, improved keyboard navigation in the WordPress admin toolbar, and accessibility refinements to Visual History. Additional fixes strengthen permissions for Notes reactions, improve compatibility with MP3 uploads, and address automatic update behavior in Git worktree installations.
Learn more: Trac #63927, Trac #66331, Trac #65122, Trac #66447, Trac #46544, Trac #66460
The new default theme, Ipsum, receives another round of improvements in WordPress 7.2 Beta 5. Accessibility enhancements include improved keyboard focus indicators and view transitions that respect reduced-motion preferences. Additional refinements to block styles and patterns provide greater design flexibility, while optimized stylesheets and other under-the-hood improvements help prepare the theme for its final release.
Learn more: Trac #66631, GitHub #198, GitHub #187, GitHub #180
WordPress 7.2 aims to fully support PHP 8.6, which is scheduled to be released on November 19, 2026. The WordPress project has a long history of being compatible with new versions of PHP as soon as possible, and this release is no different.
As of the Beta 5 release, all known compatibility issues with PHP 8.6 have been resolved.
While all of the known issues in WordPress have been addressed, you will need to verify that all of your plugins and themes are also compatible with PHP 8.6 prior to upgrading. Keep an eye on the Making WordPress Core blog in the coming days for more detailed information about what to look for.
WordPress continues to encourage all users to run the latest and greatest versions of PHP.
Learn more: Trac #66648
Testing for issues is a critical part of developing any software, and it’s a meaningful way for anyone to contribute – whether or not you have experience. Details on what to test in WordPress 7.2 are available here.
If you encounter an issue, please share it in the Alpha/Beta area of the support forums. If you are comfortable submitting a reproducible bug report, you can do so via WordPress Trac. You can also check your issue against this list of known bugs.
Curious about testing releases in general and how to get started? Follow along with the testing initiatives in Make Core and join the #core-test channel on Making WordPress Slack.
One last beta blooms
Release candidate awaits
The finish draws near

More than 50 educational institutions have joined WordPress Credits, giving students worldwide a way to earn academic recognition for contributing to WordPress. The program had two participating institutions in September 2025 and four the following month. By June 2026, that number had reached 27, before passing 50 this October.
The program launched with the University of Pisa and was announced at WordCamp Europe 2025. Since then, it has expanded through partnerships that connect students with experienced contributors and practical projects. The WordPress Credits dashboard recorded participating institutions across 17 countries as of October 19, including Bangladesh, Costa Rica, Spain, Bolivia, and Indonesia. Each institution can adapt the program to its academic requirements, allowing students to contribute as part of their studies.

Students work with mentors on projects that reflect their interests and areas of study. They might translate WordPress, improve documentation, create learning materials, or contribute to development and testing. Alongside that work, they practice collaborating with others and responding to feedback, then present their contributions at the end of the program. By October 19, the dashboard recorded 364 graduates and student contributions across 18 WordPress teams. That work supports the software and resources people use throughout the WordPress community.
Local contributors have helped establish these partnerships by introducing WordPress Credits to nearby schools and adapting it to local languages and educational settings. Mentors guide students through their first contributions, while sponsors provide support and resources. Educators help make that participation part of students’ academic work. Thank you to the students, educators, mentors, and supporters whose involvement has brought the program to more than 50 institutions.
Institutions can include WordPress Credits in an existing course, offer it as an internship, or incorporate it into a final project. The program is available at no cost to partner institutions, with flexible formats to suit their students and curriculum. To get started, read how to launch a WordPress Credits program and register your institution’s interest through the program page.
This is the first post on my new website which is still proudly powered by WordPress. Yes, WordPress. I know it’s trending these days to talk about using Claude to build static sites with a markdown “database” and how that’s made your site better and faster. But guess what? This website is also built by Claude. And guess what? It’s fast. You know what else?
Howdy,
First things first: if you haven’t updated to WordPress 7.1.4, do that before reading any further. The October 28 security release fixes more than a dozen issues, including a weakness in the upgrade process that could lead to remote code execution and stored XSS in several blocks and the Interactivity API. The fixes were backported all the way to the 4.7 branch, so don’t forget about those older sites you maintain.
Running a store? WooCommerce had a busy week, too. WooCommerce 11.2.2 is a security release with a database update, and there’s a separate security update for WooPayments with a table of fixed versions for each release line.
As for me, I’m just enjoying the autumn weather. It feels like we’ve finally shed off the days of summer heat in Alabama. And that means it’s fall festival season. I’ll see if I can find one or two to enjoy in the coming weeks.
With that, let’s get down to the latest news.
Your friendly neighborhood developer advocate, 
Justin Tadlock
WordPress 7.2 is one step closer. David Baumwald announced WordPress 7.2 Beta 4 on November 3. Beta 3 shipped inside the 7.1.4 security release. This round continues the work on the Abilities API and DataViews extensibility, and it improves focus visibility in Windows High Contrast mode. Translation updates also show up individually on the Updates screen now, so you can choose which ones to install. Beta 2 laid the groundwork for much of this, adding server-side registration for DataViews and DataForm and moving the admin to SVG icons.
The final release is still set for December 8. Spin up the Beta 4 Playground instance to test, or run wp core update --version=7.2-beta4 on a staging site.
Formatting no longer stops at the edge of a block. In What’s new in Gutenberg 24.3, George Mamadashvili shows how you can now select text across several blocks and format all of it at once. Notes pick up emoji reactions, and the Media inserter moves onto the same DataViews component behind the Site Editor’s lists. Failed saves finally explain themselves, too, with a copy button for sharing the details. The release carries the security fixes from 7.1.4, so update the plugin if you run it. The 24.4 release candidate followed on November 3.
Dashicons are on their way out of the admin bar and menu. In WordPress 7.2, those icons are inline SVGs, and Ashar Fuadi explains what the SVG icon change means for plugins and themes. Most code needs nothing. But admin color schemes and anything that styles or hides icons through ::before will need a small CSS update, and the post has before-and-after rules you can copy. There’s a new API, too: add_menu_page(), register_post_type(), and admin bar nodes now accept a registered icon name like core-admin/pin.
Visit /random/ on a 7.2 site, and you’ll land on a random published post. Aaron Jorbin details the new random content endpoint, which also works for categories, tags, authors, and custom post types. It’s on by default, with a new randomable argument for post types and a wp_enable_random_content_redirect filter to switch it off.
It hasn’t landed quietly. Dozens of comments push back on the on-by-default choice, citing hidden content that could surface (Core still has no noindex option), ORDER BY RAND() load on large sites, and agencies now facing an must-use plugin across hundreds of sites. Matt Mullenweg has since agreed it shouldn’t use the page URL structure, so expect changes before 7.2 ships.
Anne McCarthy pulled several features still in development into one prototype for imagining the near future of collaboration in WordPress. It combines the 7.2 Notes features, suggestion mode, and the Presence API with a small workflow plugin that blocks publishing until every open note and suggestion is resolved. She purposely left real-time collaboration out to show how much works without it. She also shares the full prompt she used. Borrow it and build the demo yourself. Watch for an upcoming call for testing on suggestions.
Plugins have spent years shouting over each other with admin notices. Exploring a design for Feature Notifications, from Poli Gilad, proposes a single notification bell on every admin screen, in the editor, and on the front of the site, with plugins sending data rather than layout. Existing admin notices keep working.

That last point drew the most criticism. Matt Mullenweg argued that the proposal does nothing about today’s notice spam and that the fix needs directory guidelines, enforcement, and incentives, not only a new interface. He backed David Perez’s suggestion that plugins declare each notice’s intent (operational, setup, or promotional) as a requirement.
On the code side, Jonathan Bossenger’s weekly update for October 30 reports that the notification repository is now scoped per user, laying the groundwork for the REST API. Prefer to watch the work happen? His Friday live stream includes testing the plugin in Studio and the AI-assisted workflow he uses for reviewing PRs. He also holds office hours in the Feature Notifications Slack channel on Thursdays at 10:00 UTC.
The block toolbar has picked up a lot of buttons over the years. Dave Smith asks whether this is the end of the block toolbar and demos a consolidated version inside his Create Not Learn prototype editor. In about eight minutes, you’ll see how grouping those controls could make everyday formatting quicker and more consistent without giving up any of the editor’s power. The video description has a Playground link, so you can click around it yourself.
He also took a first look at drag-and-drop grid building, pulling Andrei Draganescu’s work-in-progress free-form grid into the same prototype. You can drag, resize, snap, and rotate blocks on a grid, and that demo has its own Playground link.
Release roadmap posts have kept roughly the same shape for three years. Anne McCarthy wants to know whether they still work, and she’s asking everyone from Core committers and extenders to hosts and everyday users to help shape future release roadmaps by November 16.
WordPress Studio is now built around a conversation. Rich Tabor introduced a new workspace for building with WordPress, where you describe the site you want and an AI agent builds a first version next to a live preview. It offers four looks, then four layouts, and saves your choices to a DESIGN.md file so later chats keep the same design. You can pin notes on the preview with Annotate, bring your own Anthropic API key, or connect Claude Code, Codex, or Cursor over MCP. It’s a free desktop app for macOS, Windows, and Linux.
For a hands-on take, Elliott Richmond writes up what’s changed since his first look, along with one fair caution: the agent can now edit your live site directly, so building locally first is still the safer habit. Rich also shared why he rebuilt Studio on his own blog, and Nick Diego recorded a quick video overview of the new design and agentic features.
Stores running WooCommerce’s Purple theme are about to get more design control. In the WooCommerce 11.3 pre-release post, Brian Coords highlights color, spacing, and border controls curated for each block, including Product, Featured Product, Featured Category, and Product Categories List. The On-Sale Badge block can show the discount as an amount, a percentage, or custom text, and Product Gallery swiping on mobile now follows your finger naturally. The beta is out now, with the final release scheduled for the week of November 9.
Two new short tutorials from WordPress.com cover blocks you’ll use on nearly every site. The Columns block walkthrough builds grids, feature sections, and pricing tables, including column widths and stacking on mobile.
The Query Loop block video shows how to choose which posts appear, then sort and filter them, in about two minutes. Bookmark both for the next time a client asks how it’s done.
Ipsum, the default theme shipping with WordPress 7.2, is easy to mistake for a simple theme. Carlo Daniele’s dive into the Ipsum theme and how to extend it for Kinsta shows what’s underneath. Templates hand their layouts to hidden patterns, around 60 patterns ship with it, and the default text colors reach a WCAG AAA contrast ratio.
My favorite detail is its use of the Block Bindings API: a comments call to action changes its text depending on whether the post already has comments.
|
||||
PHPStan can’t check a call to a class it has never seen, so code that integrates with other WooCommerce extensions usually gets skipped or baselined. Ján Mikláš introduces automated PHP stubs for Woo extensions, a woocommerce/php-stubs package generated from extensions on the WooCommerce Marketplace and WordPress.org. The stubs are public on GitHub and Packagist. If your plugin or theme talks to other Woo extensions, you can check those calls without installing every extension in your analysis environment.
WooCommerce 11.3 fixes a confusing count for stores that sell bundles. When an extension adds a product to the cart as part of a bundle, the Product Button says “1 in cart” even though the shopper never added it on its own. Luis Herranz explains declaring parent-child cart item relationships through a new woocommerce_store_api_cart_item_parent_item_key filter and a parent_item_key field in the Store API. WooCommerce never marks items as children by itself, so it’s up to your extension to declare them. Today only the button count uses it, but the Cart and Mini-Cart blocks could someday nest child items under their parents.
You can now test changes on a copy of your real site without a local server. Fellyph Cintra details how to clone your WordPress site in Playground with Reprint. Install the Reprint plugin on your live site, authorize Playground with a migration key, and you’ll have an editable copy in your browser. Nothing you change there gets published to your live site. It’s handy for trying a design change, checking a plugin update, or tracking down a bug. Not ready to connect your own site? The post links to a public demo you can clone first.
Playground’s building blocks aren’t only for WordPress anymore. In Joomla Playground: shared PHP tools beyond WordPress, Fellyph Cintra looks at Herman Peeren’s community project, which runs Joomla in a browser tab on the same @php-wasm packages and mysql-on-sqlite library. The interesting part is what comes back to WordPress. A different CMS sends different queries and workloads through those shared tools, surfacing compatibility and performance issues both projects can fix.
Imagine telling your AI agent, “Help me with my example.com site,” and it recognizes WordPress, asks you to authorize it, and gets to work. That’s the experience behind WordPress for the Agentic Web, the AI team’s plan from Jason Adams. It lays out four areas of work: a more reliable MCP Adapter that could move into Core, a baseline set of Abilities for common site tasks, OAuth so you don’t have to paste Application Passwords into an agent, and an end-to-end user experience tying them together.
The 7.2 cycle lays the foundation, and 7.3 is the target. Each area still needs a lead, so now’s the time to raise your hand. Not everyone in the comments is sold on MCP-first, though. Adrian Mörchen argued that most agents already work fine over the REST API and that filling its gaps should come first, and Jason replied that Abilities serve both routes. The October 28 contributor summary covers the first discussion, with Tammie Lister volunteering to lead UX, and The Repository has its own take on the plan.
Six new experiments landed in AI 1.5.0, the canonical AI plugin, and Jeffrey Paul breaks down each one. Text to Speech generates an audio version of a post, and Content Verification detects C2PA Content Credentials in uploaded images. MCP Access installs the MCP Adapter and adds a Tools → MCP Access screen where you decide which Abilities agents can see. The other three are WebMCP, Revision Change Summary, and Block Container Label Generation. If you’re following the Agentic Web work, MCP Access is the one to try first.
Through the end of November, free WordPress.com sites can connect to ChatGPT or Claude at no cost. Full access normally comes with a paid plan. Alexa Peduzzi notes that both connections run on MCP, so after a one-time setup you can ask your AI to save a draft, clear out comments, or suggest what to fix this week. The post includes ready-made prompts that open in either tool. Not interested? Connecting is entirely optional, and a WordPress.com reply in the comments points to the separate Prevent third-party sharing setting for anyone worried about AI training on their content.
AI prototypes that ignore the design system keep landing on designers’ desks. In working towards higher-quality agentic experiences, @leilabyron shares the 13 best practices Automattic Design wrote for agentic interfaces, grouped under capturing intent, showing the work, and building trust. The guidance doesn’t stop at a list: an agentic-design-brief skill picks the practices that matter for a feature, and an AGENTS.md file gives coding agents explicit rules. One rule worth stealing: ask when the request is genuinely ambiguous, and don’t ask when the answer is already clear.
What happens when an AI feature gives a wrong answer or lets a prompt injection slip through? At WordPress Day for AI Faro 2026, Ivelina Dimova shared how to use guardrails and evals for AI features in WordPress to test quality before anything reaches production. Anyone adding AI features to client sites should pair it with the Automattic Design post above. The slides are linked from the video page.
|
|||||
Questions? Suggestions? Ideas?
Don’t hesitate to send them via email or
send me a message on WordPress Slack or Twitter @bph.
For questions to be answered on the Gutenberg Changelog,
send them to changelog@gutenbergtimes.com
Learning becomes more meaningful when students get the opportunity to put their knowledge into practice. For Meahadi Hasan, WordPress Credits opened the door to opportunities beyond website development. He explored photography contributions, participated in community initiatives like Campus Connect, and contributed to Bengali translations through the Polyglots and Training Teams, becoming an active part of the global WordPress community.
Meahadi is a final-year Computer Science and Engineering student at Pundra University of Science & Technology, Bangladesh. He joined the WordPress Credits Program in August 2026 as part of his university’s Industrial Training (Internship) course. On 2 November 2026, he successfully completed the program, but his journey was about much more than earning a certificate.
Meahadi first encountered WordPress in 2020 through YouTube tutorials, where he learned to build a basic website. However, he didn’t continue working with it regularly.
Joining WordPress Credits gave him an opportunity to explore WordPress from a completely different perspective. He discovered that WordPress is not just a website-building platform; it is a global open-source community where people with different skills can contribute.
He chose four contribution teams that matched his interests: Photos, Polyglots, Community and Training.
One of Meahadi’s most remarkable achievements was his contribution to the WordPress Photo Directory.
He initially set a target of publishing 30 photographs. He went beyond that goal and successfully published 66 original CC0-licensed photographs, featuring nature, plants, landscapes, and everyday scenes from Bangladesh.
A Selection of Meahadi’s Photo Contributions







Explore Meahadi’s Photo Directory contributions
His journey didn’t stop with photography. He also:
These experiences helped him understand how people with different skills collaborate to make WordPress better.
Photos published
WordPress Photo Directory
String Translated
WordPress Polyglots Team
WordPress Lesson Translated
WordPress Training Team
Portfolio Created
WordPress.Com
Throughout the program, Meahadi received guidance from his assigned mentor, Rashed Hossain, who helped him navigate the learning process and contribution workflows.
Muhibul Haque also shared useful resources and advice, particularly around the Training Team.
Through practical assignments, documentation, community discussions, and real contributions, Meahadi developed confidence in WordPress, translation workflows, documentation, and communicating with contributors.
Looking back on his experience, he shared that he previously viewed WordPress mainly as a platform for building websites. Now, he understands the many opportunities available within its global community, even beyond writing code.
Completing WordPress Credits is not the end of Meahadi’s journey.
He plans to continue contributing photographs, improve his Bengali translation skills, explore more Learn WordPress localization opportunities, and participate more actively in the WordPress community.
His advice to future students is simple: start with a contribution team that matches your interests, read the handbooks, ask questions, and focus on small, consistent contributions.
As he reminds us, the biggest value of WordPress Credits is not just completing a course; it’s becoming part of a community where your contributions can be genuinely useful.
Meahadi’s journey reflects what we hope to achieve through WordPress Credits: helping students move beyond theoretical learning, develop practical skills, discover their potential, and become active members of the global WordPress community.
His story shows that you don’t have to be a developer to make a meaningful contribution. Whether through photography, translation, community, or development, there is a place for everyone in WordPress.
Congratulations, Meahadi, on completing WordPress Credits and making your mark in the WordPress community. This is just the beginning! 
It’s nearly the end of 2026 and I want to use my agent with WordPress already (like…yesterday)! To do this we need to understand exactly how “AI ready” WordPress is. This post outlines where things stand from my perspective and why I think it’s critically important for the future of the platform. Not yet, but it’s getting there quickly. This is what you can and can’t do today…
[00:00:19] Nathan Wrigley: Welcome to the Jukebox podcast from WP Tavern. My name is Nathan Wrigley.
Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, building partnerships between WordPress product makers and hosting companies.
If you’d like to subscribe to the podcast, you can do that by searching for WP Tavern in your podcast player of choice, or by going to wptavern.com/feed/podcast, and you can copy that URL into most podcast players.
If you have a topic that you’d like us to feature on the podcast, I’m keen to hear from you and hopefully get you, or your idea, featured on the show. Head to wptavern.com/contact/jukebox, and use the form there.
So on the podcast today we have Martin Schmidt.
Martin has been deeply involved in the WordPress and hosting industries since 2005 when he created his first WordPress travel blog while living in New Zealand. Over the years, he’s developed websites for small businesses, spent 13 years with IONOS in various management and strategy roles, and built partnerships at Wix, and a German SaaS company.
Most recently, Martin has focused on connecting WordPress plugin companies with web hosts, helping both sides unlock growth through smarter partnerships.
Today, the conversation focused on the often overlooked world of partnerships between plugin developers and hosting companies. Martin shares insights from his two decades of experience on why hosting providers are the perfect allies for WordPress product makers looking to grow, given their established relationships and marketing channels to large customer bases.
We talk about the curious fact that many plugin builders put enormous effort into their products, but stumble when it comes to sales, marketing, and building the business relationships necessary for broader success.
Martin discusses what hosting companies are actually looking for in a partnership, the technical and marketing preparations plugin makers should have ready, and why empathy and preparation make all the difference when trying to connect with busy product managers.
If you’re a developer, freelancer, or agency owner interested in taking your WordPress product to the next level, or if you want a candid look at how partnerships really work in the open source ecosystem, this episode is for you.
If you’re interested in finding out more, you can find all of the links in the show notes by heading to wptavern.com/podcast, where you’ll find all the other episodes as well.
And so without further delay, I bring you Martin Schmidt.
I am joined on the podcast by Martin Schmidt. Hello Martin.
[00:03:14] Martin Schmidt: Hi, Nathan. Great to be here.
[00:03:16] Nathan Wrigley: Yeah, thank you. Martin and I do not know one another, so this is our first call, but we were joined together, on maybe LinkedIn. I’m not entirely sure.
[00:03:23] Martin Schmidt: I was LinkedIn. Yeah. Yeah.
[00:03:25] Nathan Wrigley: Probably LinkedIn, by Nicole, so thank you to Nicole for doing that, really appreciate the linking together there. And we’re going to have a conversation today about, I suppose the word to describe it would be partnerships. How to partner with various different entities, possibly hosting companies are going to come up and things like that, so.
Before we begin that conversation, Martin are you able to just give us your little bio? Tell us a little bit about who you are and what you’ve done in the hosting partnership WordPress space, whatever you think fits best.
[00:03:55] Martin Schmidt: Yes, absolutely. I’m from Germany. I lived down south in Karlsruhe. Originally from the Cologne area. Started working with WordPress actually in I think 2005, something like that. When I was moving to New Zealand and started studying in New Zealand. That’s when I spun up my first WordPress site as a travel blog. And this was my first contact with WordPress. So I think, yeah, one of the, not one of the first users, but one of the very early.
[00:04:20] Nathan Wrigley: Fairly early, yeah, pretty early.
[00:04:22] Martin Schmidt: Very early. So that’s when you still had to like download WordPress and upload it via FTP, and there was no like auto update in the WordPress admin, and stuff like that. So one of the very early users and.
Yeah, around that time, that’s also how I got in touch with like the whole hosting industry. I was a web developer myself, started in high school developing websites for small businesses. Built them for people here in Germany and then also in New Zealand while I was studying over there.
And when I got back from New Zealand, I started applying for jobs. And one was with Google, the other one was with Ionos. And Ionos answered I think within a week, and I’m still waiting for the answer from Google till today. So, they never really got back to me, but yeah, it’s somewhere in the mail, yeah.
But luckily the guys from Ionos got back to me and I think a week later I had a phone interview. Another four days later an interview in Karlsruhe. And then I started, I think two weeks later. Already started there like end of October with my first job as a product manager at Ionos.
And then spent 13 years at Ionos in various roles, in product management and the last five years in strategy. And from there I got the chance to move on to Wix. Worked for Wix.com in Germany. There was, during the COVID pandemic, I moved employers and started to work for Wix, and spent two years there building partnerships in, Europe.
Actually also put them in touch with a company called Sevdesk, which is a German accounting company, similar to Zero or QuickBooks Online. And couple of months later the CEO asked me if I was interested in joining their side, after they had raised some money and built partnerships from their side. I kept him waiting a little bit, but then after a while I decided, that’s interesting to join a German SaaS company. Something different than hosting, and online presence.
So yeah, I spent the next two years building the ecosystem around the SaaS software, like all the software that integrates with the accounting product basically.
Then end of 24, I got a call from my former boss from Ionos, who had just moved to hosting.com and became the CRO, and they also wanted to do partnerships. So, yeah, had a chat with him and with the CEO and started there in February 2025, and started building partnerships for hosting.com.
And, the main focus was really on building partnerships with WordPress companies. Just after Cloudfest, we launched the partnership with WP Rocket. Started to build quite a few more partnerships, or that were in the making. And by the end of the year, which was interesting to me, I had a lot of those WordPress plugin companies that I reached out to telling me, look, this is super interesting. We want to work with hosting companies.
We’re really glad to be working with you. We would also love to work with a lot of more hosting companies, but honestly we don’t really know where to start, and how to do this. And they really got me thinking. And then over New Years, and you know when you like, get some time to maybe reflect on the year and stuff that’s happening, this was like, it, really hit me. It’s like, well there’s so much interest of companies wanting to partner with web hosts.
And I’ve sat on the other side for some 20 years, like people pitching to me, like explaining me why their product is going to be the next big thing for me in the hosting company. And you start to see patterns of like things that people do good, and maybe things that people don’t do as well when like trying to pitch to you as a hosting company.
And I saw all this demand from these WordPress plugin companies and I was like, hey, maybe this is finally the idea of starting my own business. Like something I wanted to do for the last five years, but I never really had the idea of like what to do? Or not the idea that was convincing enough for myself to give up my corporate job.
And, once you got a house and family, I mean, it becomes a bit more difficult to just jump into the cold water, right? I guess a lot of people can relate to that. But this time it was different. I felt like this could really be something. So I started reaching out to more people in my network, and ask them, hey, I’m thinking about doing like this sort of consulting advisory thing. Do you think this is interesting? And I got a lot of positive feedback, way more than I had anticipated.
So I thought, okay, if I’m not doing this now, I will never do it. I will never try and do it. So yeah, I decided to go independent and officially started in May. And that’s what I’m doing now, like helping tech companies who want to partner with web hosts to find a way to do it.
And I always tell people that are interested in, you can do it by yourself, right? You can find it all out yourself. It’s probably going to take you like three to four years to figure out the right model, and make all the connections. Build the trust with the hosting companies. Find out the right business model. The right support model, like the co-marketing activities, all the things you need to do. Or if you don’t want to wait for four years, you can work with me and I help you take a shortcut.
And the goal is by month six that you have someone in your organisation who can take care of partnerships, and just run this by yourself. But you don’t make all of those mistakes, and all of those extra investments that don’t turn into anything.
My pitch to my customers is like, I’m helping you cut down the time to market. I’m telling you what works and what doesn’t work, and what makes a good pitch.
[00:09:49] Nathan Wrigley: Yeah, this is genuinely really interesting to me, and we’ll get into that a little bit later. But I have a different angle to you, but probably we’ll end up at exactly the same place.
I’ve been podcasting in the WordPress space for a decade. So 2016, something like that, I started. And, if you do podcasting often enough, your voice is heard, and people have this sort of expectation, if you send an email to me with a product that you’ve just launched, I will somehow have a silver bullet for making you successful.
And first thing to say is, I basically don’t. You know, I can put you on a podcast episode, but that really is the limits of what I can do.
But also what’s quite fascinating, and I honestly genuinely, I probably get about 30 or 40 of these emails a week. And the bit that stands out for me is how unprepared, let’s go for that word, how poorly prepared the email that I receive is.
So in many cases over the last couple of years, it’s clearly been written by an AI. There hasn’t been a lot of due diligence about who I am, so it kind of feels like this really, really cold call. I somehow got on an email list somehow. And it comes, you know, with all of the usual caveats. The first paragraph is telling me what I do, and I already know what I do. So like there was an AI in there somewhere.
But also it feels like they’ve got a product. Quite often I’ll go and look at the product and I think to myself, boy, that’s so good. Look at what they’ve done. Like they’ve built a plugin and it’s fulfilling a real need.
Unfortunately, I can’t really help them except put them on a podcast, but it occurs to me if only they could connect with all the right people, have the right language, know how to pitch themselves, know how their website should look so that it speaks to people that drop into it.
What I’m basically trying to build up a picture is of is that there’s loads of people out there who are building things, but clearly the building of it is the part that they’ve been interested in. And as soon as it’s built, they then have this moment of, oh, now what do I do with it? You know? And they don’t have that marketing expertise, and so they’re kind of looking around trying podcasters and what have you. And it feels like you are trying to step into that gap a little bit.
But instead of it being a podcast, you are trying to hook them up to what are the big players in the WordPress space? The people with deep pockets. The people who have reliable income month over month. And that’s the hosting companies. Have I summarised that correctly? Is that your experience as well? You get people that have got a thing, but don’t really know how to move on from the I’ve built the thing, to now I need to sell the thing.
[00:12:37] Martin Schmidt: Yes. So I think you’re spot on. And I would add there’s probably, I would say two groups. There’s the one which is maybe the builder who doesn’t know marketing, right? And we had these people before AI that were building fantastic products. But they just don’t know marketing because they’re fantastic builders. They’re tech people, but they’re missing that marketing piece.
And the one thing they don’t hire a marketing person who does it for them. I think that’s always a shame. You see this fantastic product, someone like driving a product with their passion. They’re really solving a pain point, but they just don’t understand how to sell it. Because to them it’s all clear, it’s all obvious, but you do need to translate it to people in your target audience.
So I think this is one group, and I see that also a lot with WordPress plugin companies. It feels like, coming from the hosting space, where all of the big companies are so good at marketing. Looking at WordPress companies, I feel like this is really something that they are somewhat missing.
I think the most successful WordPress plugin companies, I think that’s probably the ones that have understood that next to building fantastic product, and also needs fantastic marketing. But I think this is really the one group.
And the other one is, I would call them like lazy salespeople. They’re just sending out like sales messages. And we had them way before AI, just sending out without doing any research at all. You get messages and you look at them or you look at the product, it’s like, there’s no fit at all. I’m selling to small businesses, and you pitching me a product for enterprise customers. Like, why? You are just wasting time, right?
If your goal is to work with a company to potentially sell to hundred, thousands, or millions of customers, and that’s going to be a deal worth hundred thousands or millions of dollars, you should invest maybe an hour, half an hour, of research and just see if there’s any fit at all right. And then if you take the time to go in a meeting with me and pitch your product, do a little bit of research to just make it fit. Just this tiny bit of research will make you stand out amongst the crowd like completely.
[00:14:41] Nathan Wrigley: It feels to me in the first case as if, timing’s not really the right word, but there’s a component of timing in here. And what I’m meaning by that is, what I’m feeling is that a lot of people have spent all of their time building the thing. So that might be time, but it might be money, whatever the thing that you’ve got going on in your business.
But at no point during the time from conception, idea to completed product have they said to themselves, okay, at some point we’re going to have to market this. We’re going to have to think about it.
So maybe, and I don’t know if this is part of the sort of wisdom that you have, but it feels like maybe halfway through that process of build to complete build, you need to put the brakes on and say, okay, now we’re halfway through, let’s work in two channels now. Let’s do the, finish the build, but also at the same time, let’s do the marketing.
So I don’t know if there’s anything in there, like just put on the brakes before you finish, have some resources, have some ideas of contacts, have some marketing, have a website and all of that kind of stuff done. So that when you finish, it’s all ready to roll.
[00:15:43] Martin Schmidt: Yes. That’s definitely it. I don’t know if you have to put on the brakes, but I think it’s like, at least you as the CEO, you have to like work on two tracks. There’s the guys building the product, but then there’s also the marketing piece of it, right?
And you can have the most fantastic product if you’re not telling the story, if you’re not letting the world know. How are people going to find you, right? I think we see, I saw a stat on LinkedIn recently that there’s like a thousand plugins published on the repository every week. It’s going to be so crowded. You need to do something to stand out and to be found.
And I think that’s also with web hosts and every tech company, you can have the most amazing product, but if you’re not found, if the target audience doesn’t know about you, nobody will use your product. And you’re going to be the only user of your own product.
I think in the end, you need to master marketing to be successful with your business. And it’s not just about the best product. And, I think that’s the important message here. You don’t need to know marketing yourself. Just hire someone. There’s so many people specialise in marketing. Just get someone on board who knows marketing and who understands a little bit of tech to get why your product is so special, and who’s able to translate that into a customer pain point, and figure out how to sell it. that’s really it.
[00:16:58] Nathan Wrigley: So we’ve done podcast episodes on this podcast before where we’ve talked about partnerships in a different way. We’ve talked about partnerships in terms of plugin Company A joining with plugin Company B, because they’ve got similar enough products that they kind of overlap, and they can help each other out and mutually market and do marketing campaigns together and things like that.
But that’s not what we’re talking about here. We’re talking specifically about going to hosting companies. So I guess the first question is, why go to hosting companies? What is it that they bring? I suppose the obvious answer is they’ve got bajillions of customers. In many cases, you know, some of the big hosts, if you can forge some sort of relationship with them, goodness knows, you know, maybe they literally have millions of customers. But why have you made hosting companies the bit of the half of this jigsaw puzzle?
[00:17:45] Martin Schmidt: Yes. beside me coming from hosting and knowing hosting, which was kind of like, make it a bit easy to decide for hosters. But I think they also play an important role. In the end, if a small business wants to run a website, they need to host it somewhere. They decide for hosting company. They get their WordPress site spun up. And then, that’s where usually in the next step you would go with like certain plugins. Like for SEO, performance, backup, security, translations, whatever your use case is, right?
As you mentioned, the hosting company is the one that has all of the relationships with the customers. And unlike the WordPress companies, who are not allowed by the repository rules to directly market to their customers via email and things like that, they can only use popups inside the WordPress admin.
One thing that the host is free to do, they can call the customers, they can send text messages, they can send them emails. They can do all of the up and cross sell marketing to their customers. And I think that’s one advantage that the hoster has that they can bring to the table, beside all of these customer relationships, right? They can really do the full blown marketing to those free users, to push a premium version of the plugin.
[00:18:59] Nathan Wrigley: Okay. So it’s not just visibility within the platform of, I don’t know, you’re at the point of it installing a plugin because you’ve got a brand new WordPress website. And look, here’s a bunch of partners that we’ve got, you may be interested in those.
That’s one piece of it. But there’s also this sort of marketing side. Presumably just like every company on earth, web hosting companies are as keen to keep front of mind as any other company. So if they can come up with a good, and I’m doing air quotes, excuse to send out an email, they’ll do that. And why not send out an email because we’ve onboarded a new partner and, you know, have you thought about doing this with your website? It turns out we’ve got a partnership with this particular plugin company.
I’m guessing there that the ability to send out emails is something, you know, to keep front of mind is something that the web host would want to do. But what’s in it for the web host? Like if I was a plugin company coming to a web host, I would want to have in my mind, okay, these are the kind of things I know they’re looking for. What are they, what do the web hosts want in return?
[00:19:55] Martin Schmidt: Yeah. So a lot of web host will tell you, hey, I want new customers, and that’s what I usually tell the web hosts. This is something you can’t expect from the WordPress plugin company. Because they are like in the later stage of that decision process. So the customer decides for the plugin a lot later than they decide for the host. So it’s not fair to ask the plugin company to bring in new customers to the web host.
But what they can do and what the WordPress plugin company can help with is, A, make the product a lot more attractive. They’re web hosts that sell hosting bundled in with plugins like WP Rocket. So the product itself is more attractive from the get go.
And if you don’t bundle it in the start, you can also help solve certain customer pains that make the customer more happy, therefore more sticky, right? So you prevent churn. As a host, you reach like a hundred thousand, 200,000 customers. You really need to work hard that your new customer growth isn’t eaten up all by churn. Making your customers sticky and drive up the revenue per customer, that’s in the interest of the web host, right? And, with a certain size, increasing that revenue per customer also becomes very important and interesting for the web host.
So I think that’s where the plugin company can come in and help the web host. They won’t just partner with any plugin. The plugin needs to solve a certain pain point for the customer. So this could be performance, this could be SEO, this could be accessibility. So these are challenges that the customers of the web host are actually faced with. And the plugin is simply a solution to that pain point.
So the hoster has an answer to that question of their customer. They’re in the role of the trusted advisor to their customers. And if the customer says, look, I’m running a website on your servers. I need to now be in compliance with the accessibility requirements in my country, or I need to do certain things. Then there’s the answer. Let’s use WP Rocket for performance. Here’s a partnership that we have with them, right? And that’s where the plugin company can come in and help the host.
Beyond that, obviously joint co-marketing will also help the hoster. And obviously if you talk like Ionos, GoDaddy or Newfold, I mean they’re massive, like they have millions of customers. So probably what a plugin company can bring to help them in co-marketing is not going to make a huge impact. There’s hundreds of hosters with hundred thousands of customers. For them working with one of those plugin companies can still be very interesting in doing like joint co-marketing, and getting the word out.
[00:22:32] Nathan Wrigley: That’s interesting. In the back of my head, when we were talking until just now, for some reason I was thinking about all the big hosts. You know, the ones that you’ve all heard of with the millions of customers. But of course that’s not the case, is it? There are thousands of smaller hosts.
[00:22:47] Martin Schmidt: Yes.
[00:22:48] Nathan Wrigley: Who may be more amenable to this kind of thing because, well, Idon’t know, they just don’t have that sort of scale that they need to worry about. And, you know, they’re looking for opportunities because they themselves are looking to grow in different ways that perhaps the other big hosts don’t have to think about quite so much.
Okay. So that’s interesting. So, you know, if it doesn’t fit one hosting company and you get a silent wall from all the big ones, that doesn’t mean you’re out of the game. It may be that the smaller hosts with different staff, and a different approach, and different geography and things like that, they may be more amenable to that.
[00:23:21] Martin Schmidt: Yes, absolutely. And I will always tell my clients, I know that GoDaddy, Ionos and Newfold look very interesting because their publications, that they have millions of customers, but you don’t want to start with them. It’s going to take you three or four years to get a deal done if at all. If you start with them, I mean you’re going to give up frustrated halfway through probably.
So start with the smaller guys. They’re more approachable, right? They may be less busy. You mentioned that you get like 30 emails a week. That’s what the everyday of a product manager at an Ionos or GoDaddy looks like as well. They get pitches all the time. Getting some air time with them is nearly impossible.
Start with the smaller guys and they’re going to be a lot more open to discuss with you. And start some smaller partnerships. Work through the teething problems of partnerships with bigger companies, right? Build some track record. And once you’ve established a track record, you can work your way up, right? Every hoster has a competitor that’s bigger and one that’s smaller. Once the smaller competitor starts doing something, they will notice, and they will look like, why are these guys partnering with plugin company XYZ? Should we be doing the same? So you kind of like work your way up to the bigger guys and the bigger guys, right?
[00:24:34] Nathan Wrigley: Yeah.
[00:24:35] Martin Schmidt: Everyone is watching the other guys and watch what they do. So it’s, once you start working with some of them, the rest will start like, oh, this is interesting. If X, Y, Z worked with them, maybe we should too. That’s how you build the traction, but you need someone to start, right? And that’s probably not going to be the biggest guy.
[00:24:53] Nathan Wrigley: Yeah, and again, I hadn’t really thought about that, but yeah, the, sort of looking over your shoulder if you’re a hosting company, seeing with perhaps jealous eyes, oh look, they’re getting loads of attention out there on social media because they’ve formed this relationship. And their emails are going out, and people are making comments on their tweets and their blog posts and things like that. Oh, we should definitely get a bit of that. Okay. That’s, really interesting.
So if somebody approaches you, then let’s say they’ve got a plugin. Let’s just assume that it’s a plugin that is useful and that a hosting company would be interested in it, if they had everything wrapped up correctly. What would be some wisdom that you would drop in terms of how to wrap it up? Like, how prepared do you need to be? What are the kind of things that you expect plugin developers to have ready, so that on day one, when you do your first outreach to the first hosting company, you feel confident that, okay, I’ve got a good client here, we’ve got a good chance. What are the bits and pieces that you need to have them have done?
[00:25:50] Martin Schmidt: I think on the technical side, I mean they will need to have some sort of like provisioning enabled. The host would probably want to sell the plugin themselves within their billing engine, and their system. So they will need some sort of provisioning to your system to say look, someone bought a licence and this licence needs to be valid and stuff like that.
So, this integration and that usually, I mean, if you don’t have that, it probably takes you a few months to implement that. So that’s something like, I would really start first and built these kind of things.
The other stuff that I think the plugin company should have ready is, what’s your proposition to the web host? And what’s the proposition of your product to the web host customers? I always tell my clients like, don’t make the other guys think. Tell them. Show them that you thought about it. Coming back to our earlier point about people being unprepared, don’t be that unprepared person. Like once you get some air time with these guys, tell them what your product is. Tell them what your product, or your company can do for the web host. But also tell them how they should be using your product and marketed to their customers.
[00:26:56] Nathan Wrigley: Kind of spoonfeed them basically.
[00:26:58] Martin Schmidt: Yes.
[00:26:59] Nathan Wrigley: Have everything so that they can lift it and just walk off with it and, okay, we’ll do that then.
[00:27:03] Martin Schmidt: Yes. It might feel like spoonfeeding and like, why do I need to do your job? But I mean, in the end, put yourself in the shoes of that product manager, and tell them, look, if I was you, I would be selling my product this and this way.
Some of the worst product pitches I had. Companies came to me. Told me look, this is our product. You’re going to make millions with it. And then I was like, okay, that’s interesting. How do I sell it to my customer? And then the answer was like, I don’t know your customers. You need to know how to sell stuff to your customer. It’s like, that’s not how you land a deal, right?
And one thing I like to do when I was pitching products. I looked at the website of the company I was pitching to. I mocked up their website with my product, and I put that in my presentation, and I told them, look sorry guys, we already hacked your website. Our product is already on your website. This is what it’s going to looks like. This is what it’s sold for, right? It shows them that you put some thought into that. That’s going to make you stand out.
Understand the work life of that product manager. They get those 30 emails like you, do. They decide to go on that meeting with you. You spend 30 minute pitching your product, and then you leave them with this big question mark. Like okay, this sounds interesting, but how the heck do I sell this to my customers?
After your meeting then they have lunch, then there’s like an escalation, then there’s an all hands, then there’s the weekend. On the next Monday they will have almost forgotten about you. And if they think about you it’s, oh, I still have to figure out how to sell this. This is complicated. I don’t have time for this. I’m going to postpone it. And that’s not what you want to achieve.
You want them to go out of that meeting and thinking, well this is an amazing product, solves a problem for my customers. And these partners, they think about me. They think about how I should be selling it. And maybe it’s not a hundred percent right. It’s not about getting it a hundred percent right.
[00:28:51] Nathan Wrigley: Right. They can adapt.
[00:28:52] Martin Schmidt: Yes. But giving them something to adapt is like a lot more than just don’t give them anything, right. And adapting is always easier than coming up with it yourself.
[00:29:01] Nathan Wrigley: So, the email that I typically get is basically a description of a product. It tells me what it’s called and then what it does. And often it’s a fairly technical description of a product. And, I imagine that if you are a marketer, you’re four lines into that email and your eyes have glazed over, and it’s like, okay great.
But what you are describing is go the extra mile. Don’t just explain the product. Presumably, there’s a bit of that’s got to go on, but it’s also now explain to the person receiving that email how their company can use that. How they could market it. The way that could be marketed. The sort of mockup landing page that you described just there. Go the extra mile, sit in their seat for a minute. Try to imagine what their busy life is like, have a bit of empathy, and imagine that they’ve only got an attention span of a few moments. It’s more that, than the here’s a product description. Now that you know what it is, please come and contact us, because that’s just not going to happen.
[00:29:59] Martin Schmidt: No, it’s not. I think it’s the same for us in private life. If you get emails about products that. I mean you just know yourself. You’re busy with so many things in between. Your kids coming home from school, and someone calling, your parents calling and all of that. You, just look at the email and if it doesn’t click immediately, it goes to the trash bin.
And it’s the same with these guys as well. Convincing people just in email is probably going to be difficult. You need to at least get them into the meeting. And I think that’s the one step before that. But once you have them in a meeting, spend that time wisely. It’s difficult enough to get them into the meeting. But if you have them in a meeting, don’t waste it with generic presentations.
Invest this little bit of effort, and mocking up that websites or just taking a bit of a look at who they’re selling to and adapting your message to that. It doesn’t take a ton of work. And it didn’t take a tonne of work four or five years ago. And now with AI it’s even less, it’s even less work, right? But if you want me to trust you as my partner to go forward and sell to my customers, that’s going to blame me for everything. I want to see that you invest a little bit of effort too.
[00:31:04] Nathan Wrigley: I think that’s right. Yeah. I think that’s a very human characteristic, isn’t it? I would like to see that you made an effort, if I’m going to make an effort. That’s just how the game goes, right? That’s just how it is. You know, if I get the impression that you just want to rock up, make loads of money, and do nothing, that’s never going to work really.
[00:31:25] Martin Schmidt: No.
[00:31:26] Nathan Wrigley: I mean there’s the occasional person that manages to pull that off, but on the whole, that’s not how human relationships flourish and work.
[00:31:33] Martin Schmidt: In the end, it’s about you want to build a partnership, right? And that’s not, I come to you and you give me loads of money. I don’t have a lot of friends like that. And I don’t think anyone else has a lots of friends like that.
Usually it’s like you give and you receive, right? And sometimes one side invests a bit more, and the other side invests a bit more. But usually if only one side is giving and the other one is only taking, that’s a toxic relationship. And usually they tend to break. So why should business relationships work any differently?
But it’s a funny conception that a lot of companies have is oh, I want to do partnerships. I just go out there and then they’re going to sell my product and I’m going to make lots of money, and I don’t need to do anything. That’s honestly what a lot of companies think.
And that’s the difficulty that a lot of partner managers have, right? They’re being sent out to get those partners, and then they’re expected to bring in just all the revenue without any additional investment. And that’s just not happening. Honest truth, nobody is out there waiting for you and for your product.
[00:32:32] Nathan Wrigley: Yeah. That is the brutal truth isn’t it? Do you subscribe to doing things in person? You know, so WordPress has got a real panoply of events, Meetups and WordCamps and there’s obviously other things that you mentioned, you know, Cloudfest and things like that. Do you find that tends to short circuit things?
I guess there’s a bit of personality that comes into this as well. You know, some people are, seem to have all the characteristics for selling. They’re incredibly good at that kind of thing. Maybe they’re practised at it. Maybe they’re just, you know, born in that wonderful manner. Do you subscribe to that? Is that a part of this jigsaw puzzle as well? You know, show up, meet the people, shake the hands, go to the restaurants, do the schmoozing and all of that.
[00:33:12] Martin Schmidt: Absolutely. You could do all the Zoom calls that you want, but I’ve experienced it firsthand. Like during COVID, we were talking to people for six months via video conference. Like one in person meeting in Munich. It felt like this moved us further than just the six months of constant video calls.
You can meet people, and you can relate to them, and there can be some sympathy and stuff like that. And you might not have to meet ever, but it usually helps a lot to build that trust. To just meet the person face to face, shake a hand, maybe have a beer and have a laugh and stuff like that just helps a great deal.
And I’ve seen partnerships without any face-to-face meeting, but usually I would definitely advise to see people in person. And some people are just difficult to get hold of. And then catching them at the Colosseum Bar at Cloudfest 10 o’clock at night really helps to suddenly be in touch with that person.
[00:34:07] Nathan Wrigley: There is something ever so human about that isn’t there? And I think we all on some level enjoy that.
So you found yourself in this product market space. Like I said, I know that this is a thing. So I would imagine that given a fair wind, you’ll be doing this for years to come.
Where do you find yourself online? Do you have a website where you’ve packaged up these products and services, you know, these partnership liaison services that you do? Where can people find you? Where do they go online to discover more about you?
[00:34:37] Martin Schmidt: At the moment mostly active on LinkedIn. That’s where I meet a lot of the people. I also have a website, martinschmidt.co. And that’s where also people can reach out to me. The website has been a little bit neglected to be quite fair because I straight on, jumped into LinkedIn and started publishing on LinkedIn, because the audience is already there. And people are not searching for how do I build partnerships with web hosts? But they come to me via LinkedIn because they tend to read some of my posts, and that’s how I get to speak to people like yourself.
[00:35:07] Nathan Wrigley: Yeah. Well, that is exactly how it happened. It was LinkedIn and I think you’re right. I think having a website would be of great value, but at the same time, you know, given the proclivities of what you’re doing, LinkedIn seems to be very much the best place to do that.
What I’ll do is I will put your bits and pieces into the show notes. So if dear listener, you head to wptavern.com you search for the episode with Martin Schmidt, that’s S-C-H-M-I-D-T, you’ll be able to find the links there. So hopefully you’ll be able to contact Martin via LinkedIn and what have you.
Really interesting topic and Martin, thank you for chatting to me about it today.
[00:35:42] Martin Schmidt: Yes. Thanks for having me, Nathan. It was fantastic.
On the podcast today we have Martin Schmidt.
Martin has been deeply involved in the WordPress and hosting industries since 2005, when he created his first WordPress travel blog while living in New Zealand. Over the years, he’s developed websites for small businesses, spent 13 years with IONOS in various management and strategy roles, and built partnerships at Wix and a German SaaS company. Most recently, Martin has focused on connecting WordPress plugin companies with web hosts, helping both sides unlock growth through smarter partnerships.
Today the conversation focused on the often-overlooked world of partnerships between plugin developers and hosting companies. Martin shares insights from his two decades of experience on why hosting providers are the perfect allies for WordPress product makers looking to grow, given their established relationships and marketing channels to large customer bases.
We talk about the curious fact that many plugin builders put enormous effort into their products, but stumble when it comes to sales, marketing, and building the business relationships necessary for broader success.
Martin discusses what hosting companies are actually looking for in a partnership, the technical and marketing preparations plugin makers should have ready, and why empathy and preparation make all the difference when trying to connect with busy product managers.
If you’re a developer, freelancer, or agency owner interested in taking your WordPress product to the next level, or if you want a candid look at how partnerships really work in the open source ecosystem, this episode is for you.
WordPress 7.2 Beta 4 is ready for download and testing!
This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site to explore the new features.
WordPress 7.1.4 was released on October 28 which included WordPress 7.2 Beta 3.
You can test WordPress 7.2 Beta 4 in any of the following ways:
| WordPress Beta Tester Plugin | Install and activate the WordPress Beta Tester plugin on a WordPress install. Select the “Bleeding edge” channel and “Beta/RC Only” stream. |
| Direct Download | Download the Beta 4 version (zip) and install it on a WordPress website. |
| Command Line (WP-CLI) | Use this WP-CLI command: wp core update --version=7.2-beta4 |
| WordPress Playground | Use a 7.2 Beta 4 WordPress Playground instance to test the software directly in your browser. No setup required-just click and go! |
The scheduled final release date for WordPress 7.2 is December 8, 2026. The full release schedule can be found here. Your help testing Beta and RC versions is vital to making this release as stable and powerful as possible. Thank you to everyone who contributes by testing!
For technical details on the issues addressed since Beta 2, see the following links:
WordPress 7.2 Beta 4 continues refining the upcoming release with improvements to accessibility, editor reliability, and developer APIs, alongside additional bug fixes and compatibility updates.
Recent work includes improved keyboard focus visibility in Windows High Contrast mode, refinements to administration interfaces, and fixes for right-to-left block alignment and custom block spacing.
Developers will also benefit from continued improvements to the Abilities API, DataViews extensibility, and REST API behavior. Additional fixes strengthen revision handling, input validation, and compatibility across supported environments.
Learn more: Trac #45910, Trac #66382, Trac #66427, Trac #66383, Trac #66343, Trac #66329
The new default theme, Ipsum, continues to receive refinements ahead of WordPress 7.2’s final release. Recent updates improve accessibility with clearer keyboard focus indicators, more descriptive screen reader links, and better support for right-to-left languages. Additional improvements refine block patterns, touch target spacing, and color palette compatibility with other default themes.
Learn more: Trac #66352, GitHub #15113
WordPress 7.2 makes managing translation updates easier by displaying individual available updates on the Updates screen. Administrators can now review and selectively install translation updates, bringing language management in line with the familiar plugin and theme update experience.
Learn more: Trac #42281, GitHub #11610
Testing for issues is a critical part of developing any software, and it’s a meaningful way for anyone to contribute – whether or not you have experience. Details on what to test in WordPress 7.2 are available here.
If you encounter an issue, please share it in the Alpha/Beta area of the support forums. If you are comfortable submitting a reproducible bug report, you can do so via WordPress Trac. You can also check your issue against this list of known bugs.
Curious about testing releases in general and how to get started? Follow along with the testing initiatives in Make Core and join the #core-test channel on Making WordPress Slack.
Where did Beta Three go?
A surprise along the way
Four arrives on cue.
Props to @audrasjb, @courane01, @huzaifaalmesbah for pre-publish review.
This is an aggregation of blogs talking about WordPress from around the world. If you think your blog should be part of this site, send an email to Matt.
For official WordPress development news, check out the WordPress Core Blog.
November 12, 2026 11:45 PM
All times are UTC.