WP Weekly 295 – Back ![rw-book-cover](https://thewpweekly.com/wp-content/uploads/2026/05/wp-weekly-image-295.png) 🔗 **Source:** [WP Weekly 295 – Back](https://thewpweekly.com/issue-295/) > [!note]+ Document Notes > --- > tags: [wordpress, wordpress-7-1, ai-bot-traffic, website-security, abilities-api, wordpress-business] > author: Davinder Singh Kainth > source: The WP Weekly > reference: https://thewpweekly.com/issue-295/ > date created: 2026-06-22 > --- > # 🏷️ Title: WP Weekly 295 — Back: Delayed Plugin Updates, AI Bot Traffic, Top Plugin Authors > ## 🧭 Table of Contents > - [📝 Summary](#-summary) > - [📖 Main Content](#-main-content) > - [📚 References](#-references) > - [🗣️ Paraphrase](#-paraphrase) > - [📰 Newsletter](#-newsletter) > - [✅ Action Items](#-action-items) > - [🧪 Hypotheses](#-hypotheses) > - [📊 Methodology](#-methodology) > - [❓ Questions](#-questions) > - [🔮 Future Research](#-future-research) > - [💡 Implications](#-implications) > - [🧠 Learning Styles Assessment](#-learning-styles-assessment) > - [📊 Accessibility Assessment](#-accessibility-assessment) > - [🌍 DEIB Assessment](#-deib-assessment) > - [✅ Logical Validity](#-logical-validity) > - [🛡️ DARVO Analysis](#-darvo-analysis) > - [🎯 Conclusion](#-conclusion) > - [🧱 Refactor Appendix](#-refactor-appendix) > ### 🔗 References > - [WordPress.org — 24-hour auto-update delay](https://wordpress.org/news/2026/06/pts/) > - [Kinsta — AI & Bot Traffic report](https://kinsta.com/ai-bot-traffic/) > - [GoDaddy — Annual Cybersecurity Report](https://www.godaddy.com/resources/news/godaddy-annual-cybersecurity-report) > - [Roadmap to WordPress 7.1](https://make.wordpress.org/core/2026/06/19/roadmap-to-7-1/) > - [The Repository — Awesome Motive breach widens](https://www.therepository.email/awesome-motive-breach-widens-as-uncanny-automator-confirms-customer-data-theft-monsterinsights-users-hit-with-phishing-campaign) > ## 📝 Summary > - **What happened.** WP Weekly issue 295 (Davinder Singh Kainth) returns after a WordCamp Europe 2026 hiatus with a dense curated digest of WordPress ecosystem news: WordPress 7.1 release prep, a temporary 24-hour delay on plugin/theme auto-updates, a wave of Abilities-API/MCP product integrations, two notable security/traffic studies, and several business moves. > - **Why it matters.** Three threads in this issue are structurally significant rather than incremental: (1) the **24-hour auto-update delay** signals WordPress.org institutionalizing an AI-assisted security-review window; (2) the **Abilities API** is rapidly becoming the default integration surface (SEOPress, Stream, WPForms, SureCart all shipped support this issue); and (3) **AI bot traffic** is now a first-order infrastructure cost (Kinsta: 1 in 31 visits is an AI bot). > - **Key stakeholders.** Plugin/theme authors (auto-update delay + Abilities API), hosts (AI bot load), site owners (security, breach exposure), the WP project (7.1 squad, market-share decline), and the commercial ecosystem (Progress Planner acquisition, SiteGround controversy). > - **Risks and tradeoffs.** The digest is promotional by format (sponsor blocks, affiliate links throughout) and reports vendor studies (Kinsta, GoDaddy) without independent verification. Market share is down (33%, from 36%), and two security stories — the widening Awesome Motive breach and SiteGround's 1M forced installs — point to trust strain. > - **Bottom line.** A "state of the ecosystem" snapshot: WordPress is consolidating an AI-integration layer (Abilities API/MCP) and a security-review posture (update delay) at the same moment it faces measurable market-share erosion and bot-traffic cost — the platform is professionalizing under pressure. > ## 📖 Main Content > ### 🗒️ Notes > #### Core / WordPress 7.1 > - **24-hour auto-update delay**: WordPress.org adds a temporary 24-hour hold before plugin/theme updates distribute via auto-update, creating a window for security review "including the use of AI-assisted tools that can operate continuously." This is the load-bearing core item — it changes the update threat model from "instant propagation" to "reviewed propagation." > - WordPress **7.1 release squad** announced, Anne McCarthy as lead; **Roadmap to 7.1** focuses on AI, Admin, APIs, Blocks. > - **WP 7.0.1** general release scheduled July 9, 2026. > - **Gutenberg 23.4** React 19 plans **reverted** for now (recurring theme — React 19 upgrade keeps getting deferred). > #### The Abilities API adoption wave (the real trend this issue) > - **SEOPress 10.0** — Abilities API support; free version lets an agent read/update SEO title, meta description, indexing rules; Pro adds redirects, schema, keywords, AI-generated meta. > - **Stream 4.2** — exposes its audit log as WordPress Abilities; any MCP-aware client (Claude Desktop, Claude Code, Cursor, ChatGPT) can read and act on it ("ask your audit log a question"). > - **WPForms** — new write support for the Abilities API. > - **SureCart MCP enhancements**, **CortexWP AI** (debugs plugin/site/server, asks permission before changes), **GTmetrix MCP server** (perf data into Claude/Codex/Cursor). > - Read together: the Abilities API + MCP is becoming the standard machine-interface for WordPress plugins this quarter. > #### Security & traffic studies > - **Kinsta AI & bot traffic** (10B+ requests analyzed): 300%+ bot-traffic surge in one year; **1 in 31 web visits is an AI bot**; one bot generated **3.75M "add to cart" hits in 24 hours**. > - **GoDaddy Annual Cybersecurity Report** (932,641 threat detections across 834,661 infected sites, 2025): general malware **41.5%**, SEO spam **35.2%**, malicious redirects **21.7%**, unwanted ads **1.1%**, defacements **0.5%**. > - **Awesome Motive breach widens**: Uncanny Automator confirms customer data theft; MonsterInsights users hit with a phishing campaign (Rae Morey / The Repository). > - **llms.txt study** (Ahrefs): **97% of llms.txt files never get read** by bots or humans. > #### Numbers & business > - **WordPress powers 33% of the web in 2026, down from 36%** (GravityKit) — measurable market-share erosion. > - **Top plugin authors** (WP Beacon, 35,789 listed): Syed Balkhi, Automattic, Yoast, Elementor, WordPress.org, Rock Lobster, LiteSpeed, Brainstorm Force, Updraft, Google. > - **Progress Planner acquired by Your.Online** — Joost de Valk & Marieke van de Rakt join to lead AI capabilities. > - **SiteGround AI plugin** controversy — ~1M forced installs (Mark Zahra / WP Mayor). > - **Pressship** (Automattic) — CLI plugin-publishing project for WordPress.org. > #### Community > - **Support Eric Binnion** — long-time Automattic engineer facing stage-4 esophageal cancer; Anne McCarthy organized a GoFundMe. > - WordCamp US 2026 (Phoenix, Aug 16–19); WordCamp Asia 2027 (Penang); WCEU 2027 (Málaga). WordCamp India 2027 host-city applications open. > - Notable: **Courtney's own Airo Builder "new look site in minutes" video** is featured in the YouTube section. > ## 📚 References > - [WordPress.org news — 24-hour update delay](https://wordpress.org/news/2026/06/pts/) > - [Make WordPress Core — Roadmap to 7.1](https://make.wordpress.org/core/2026/06/19/roadmap-to-7-1/) > - [Kinsta — AI bot traffic report](https://kinsta.com/ai-bot-traffic/) > - [GoDaddy — Annual Cybersecurity Report](https://www.godaddy.com/resources/news/godaddy-annual-cybersecurity-report) > - [Ahrefs — llms.txt study](https://ahrefs.com/blog/llmstxt-study) > - [GravityKit — WordPress market share 2026](https://www.gravitykit.com/wordpress-market-share-2026/) > - [The Repository — Awesome Motive breach widens](https://www.therepository.email/awesome-motive-breach-widens-as-uncanny-automator-confirms-customer-data-theft-monsterinsights-users-hit-with-phishing-campaign) > - [XWP — Stream 4.2 ships the Abilities API](https://xwp.co/stream-4-2-ships-the-abilities-api-ask-your-audit-log-a-question/) > ## 🗣️ Paraphrase > - The newsletter returns from a WordCamp Europe break with a packed issue centered on WordPress 7.1 prep and a temporary 24-hour auto-update delay meant to open a security-review window. > - A cluster of plugins shipped Abilities API / MCP support this issue (SEOPress, Stream, WPForms, SureCart), making agent-readable WordPress data the quarter's dominant integration pattern. > - Two studies quantify the security/traffic landscape: Kinsta finds AI bots now account for roughly 1 in 31 visits with a 300%+ yearly surge, and GoDaddy's report breaks down malware categories across ~835k infected sites. > - Business moves include Your.Online acquiring J I am back from attending WordCamp Europe 2026, and WP Weekly is also back with a loaded issue. The preparation for WordPress 7.1 has started, and there will be a temporary 24-hour delay on plugin and theme auto-updates. Also, this issue is packed with many product updates, new plugins, and studies to understand AI Bot traffic and website malware landscape. **[Melapress builds](https://thewpweekly.com/s-melapress)** professional-grade WordPress [security & management plugins](https://thewpweekly.com/s-melapress): WP Activity Log, Melapress Login Security, Melapress Role Editor, & WP 2FA. **[WP Engine Newsroom](https://thewpweekly.com/s-wpengine-newsroom)**: Designed specifically for media organizations publishing at scale, learn how WP Engine Newsroom [simplifies publishing with](https://thewpweekly.com/s-wpengine-newsroom) fewer tools, connected workflows, and performance insights. **Leave single-server hosting in 2015.** Choose 20i’s autoscaling [Managed WordPress Hosting](https://thewpweekly.com/s-20i), built for traffic surges, complex sites & demanding PHP workloads, [all without missing a beat](https://thewpweekly.com/s-20i). ↑ Community Sponsors supporting this weekly * New Pressship Project… Automattic has launched the [Pressship project](https://pressship.org/) for plugin publishing from the command line. This open source project validates, packages, submits, releases, inspects, and demos WordPress .org plugins – with review, SVN, and local setup steps kept explicit while the chores stay quiet. * CortexWP AI… check the new AI SaaS tool for WordPress users, called [CortexWP AI](https://cortexwp.ai/). With this, users can connect their WordPress sites and chat about the issue to debug, and CortexWP debugs the plugin’s codebase, the site’s codebase, and the server stack. To deploy a fix, it asks for permissions before making any changes. * GTmetrix + MCP… the team at GTmetrix has [released an MCP server](https://gtmetrix.com/blog/gtmetrix-mcp/) that connects GTmetrix data directly into AI tools like Claude, Codex, and Cursor. Instead of manually diagnosing issues in one tool and writing code/optimizations in another, users can now start tests, analyze bottlenecks, and generate code fixes entirely within their AI chat interface. * xCloud Pulse + Mac App… Mac users who run websites and servers on xCloud can now keep an eye on everything they manage without ever opening the browser. A Free [macOS Menu Bar App](https://xcloud.host/docs/install-and-set-up-xcloud-pulse-macos-menubar/?fpr=wpw) allows you to check on Site health, SSL, and backups, Vulnerabilities, Server status, and more. See [video walkthrough](https://youtu.be/Sg_KLTcKQsg?si=ZT0mZlAMdA-Pz_h9) (YouTube) by David McCan. Content Lifecycle Manager… the team at WPVibes has released a new [Content Lifecycle Manager](https://wpvibes.com/plugin/content-lifecycle-manager/) plugin. It adds ownership, review scheduling, and lifecycle statuses to every post and page. The overview screen shows content health at a glance, indicating how many posts are healthy and how many need attention. Auto Release Posts for GitHub… Jake Goldman [shared](https://www.linkedin.com/posts/jacobgoldman_for-the-first-time-in-over-a-decade-i-shipped-ugcPost-7469121103064580096-40Qo/) (LinkedIn) about releasing free [Auto Release Posts for GitHub](https://wordpress.org/plugins/auto-release-posts-for-github/) plugin in the repository. It monitors GitHub repositories for new releases, and uses AI to research each release and generate a human-readable blog post about it. Rank Bix SEO… Sumit Singh has released a free [Rank Bix SEO](https://wordpress.org/plugins/rankbix-seo/) plugin in the repository. It promises to be a lightweight plugin for rankings, with such as Meta Title & Description management, XML Sitemaps, Schema/JSON-LD support, Open Graph integration, Image SEO, Breadcrumbs, Redirections, and more ###### More Plugins: Zyre Addons, AI Alt Text, Database Cleaner Zyre Addons for Elementor… Abdur Razzak shared a newly launched plugin for Elementor called [Zyre Addons](https://zyreaddons.com/), also available on the [repository for free](https://wordpress.org/plugins/zyre-elementor-addons/). It features 60+ Elementor widgets, 200+ styles, blocks, and page sections, pre-built ready-to-use layouts, flexible drag-and-drop customization, responsive and accessibility-focused workflow. ShortPixel AI Alt Text Generator… the team at ShortPixel has released ShortPixel [AI Alt Text Generator](https://shortpixel.com/blog/introducing-the-shortpixel-ai-alt-text-generator/) plugin ([free repo link](https://wordpress.org/plugins/shortpixel-ai-alt-text-generator/)). If your ALT text is missing, generic, or empty, the plugin helps fill in the gaps with accurate, descriptive SEO data, whether you are optimizing new uploads or your entire existing Media Library. CodingBunny Database Cleaner… Matteo De Maria shared a newly released free [CodingBunny Database Cleaner](https://wordpress.org/plugins/codingbunny-database-cleaner/) plugin in the repository. It promises to be a straightforward and powerful plugin that helps you analyze, filter, and safely remove unnecessary data from your database. SEOPress + AI agents… 10.0v added support for the [new WordPress Abilities API](https://www.seopress.org/newsroom/product-news/seopress-10/ref/313/), with the free version enabling an agent to read and update: SEO title, meta description, and indexing rules. The Pro version allows you to create and manage redirects, edit schema, set target keywords, generate AI-optimized titles, meta descriptions, and image alt text. CrawlWP + SEO Stats… CrawlWP now includes the [SEO Stats dashboard](https://crawlwp.com/article/overview-of-seo-stats-feature/), providing detailed insights into your website’s performance. This dashboard offers actionable data and helps you understand how users from search engines interact with your content. SureRank + AI Schema… 1.7.5v and Premium 1.7.2v have introduced the [AI Schema Recommendations](https://surerank.com/whats-new/?aff=3aa30af5#surerank-v1-7-5-premium-1-7-2) feature. You can get AI-powered schema suggestions without leaving the Schema tab, see Google’s indexing status directly inside the SEO meta box, and manage all your platform integrations from one dedicated page. FlowMattic + Jaadu AI Agent… the team at FlowMattic shared a [video teaser](https://youtu.be/EZuty69athE?si=2ohv4WLBh-h7k1uw) (YouTube) of the upcoming 7.0v, introducing a new AI agent named Jaadu. Also, from-scratch Image Template Builder, multi-page PDF Templates, conversion-optimized Forms, Calendly-style Bookings, and a completely revamped admin experience. Keep an eye [on the change log](https://flowmattic.com/changelog-new/?aff=53) for this anticipated release. Easycommerce + AI Shopping Agent… users of Easycommerce powered stores can now leverage the new [AI Shopping Agent feature](https://easycommerce.dev/features/ai/agentic/shopping-agent). This conversational AI on your storefront searches products, creates orders, and generates payment links, completing full purchases through chat. Stream + Abilities API… 4.2v of [Stream](https://wordpress.org/plugins/stream/) comes with [Abilities API support](https://xwp.co/stream-4-2-ships-the-abilities-api-ask-your-audit-log-a-question/). Now the same data is also exposed as a set of WordPress Abilities, and any MCP-aware client can read and act on it: Claude Desktop, Claude Code, Cursor, ChatGPT, anything that speaks the Model Context Protocol. 1. Support Eric Binnion… long-time Automattic engineer Eric Binnion is facing stage 4 esophageal cancer. Anne McCarthy has organized a GoFundMe campaign for Binnion & his family. [Support Eric](https://www.gofundme.com/f/standing-with-eric-binnion-his-family), “If you’ve used WordPress, WordPress .com, Jetpack, WooCommerce, you’ve benefited from his work whether you realize it or not”. 2. Top Plugin Authors… the WP Beacon website has an interesting listing of the [top plugin authors](https://wpbeacon.io/authors/) with over 35,789 authors listed. Top ten are: Syed Balkhi, Automattic, Yoast, Elementor, and WordPress .org, Rock Lobster Inc., LiteSpeed Technologies, Brainstorm Force, Team Updraft, and Google. 3. Plugins Breach Widens… Rae Morey has published a comprehensive piece on how Awesome Motive [breach has expanded](https://www.therepository.email/awesome-motive-breach-widens-as-uncanny-automator-confirms-customer-data-theft-monsterinsights-users-hit-with-phishing-campaign) with Uncanny Automator confirming customers’ data theft and MonsterInsights users facing a phishing campaign. 4. Jetpack + Reader Chat… the new reader chat feature adds a [small chat experience](https://jetpack.com/resources/introducing-reader-chat-powered-by-jetpack-search/) to your website, which enables visitors on your website to ask questions and get answers based on your website content. This feature is available in Preview on eligible public sites with Jetpack Search. 5. WordCamp Rajasthan… one of the prominent upcoming WordCamps in India is happening in Rajasthan on October 3 and 4, 2026. The [call for sponsors](https://rajasthan.wordcamp.org/2026/call-for-sponsors/) for packages from $250 to $1100 is now open. Also, the [call for speakers](https://rajasthan.wordcamp.org/2026/call-for-speakers/) is open for applications. 6. WordCamp + Events… At WordCamp Asia 2026, WordCamp India was announced as the fourth flagship event. Now, applications are [open for the host city](https://make.wordpress.org/community/2026/04/30/wordcamp-india-2027-whats-next/) of the first ever edition of WordCamp India 2027 event, until end of June 2026. The [call for speakers](https://wpsuomi.fi/community/call-for-speakers/) is open for the WP Suomi event until August 10, 2026. 24 Hr Delay in Auto Updates…WordPress .org is adding a [temporary 24-hour delay](https://wordpress.org/news/2026/06/pts/) before plugin and theme updates are distributed through auto-updates. The pause creates a window for security review, including the use of AI-assisted tools that can operate continuously. * WP 7.0.1 [release schedule](https://make.wordpress.org/core/2026/06/18/wordpress-7-0-1-release-schedule/) is here, general release on July 9, 2026. FluentCart + EU Compliance… from June 19, 2026, a new rule takes effect across Germany and the EU – every B2C store selling online must offer a clearly visible withdrawal function, a “Withdraw from contract here” button that any customer can reach without logging in. The new [customer rights feature](https://fluentcart.com/blog/fluentcart-1-4-2/?ref=223) addresses this requirement for FluentCart users. Builderius + Remote Sync… the team at Builderius has released a [remote sync feature](https://builderius.io/remote-sync-ships-today/?referral=f0f2f123eb) that lets you push a Builderius project from local or staging straight to a remote WordPress install in one click. For those running agency setups or library sites, this is the one-click version of what export/import was getting you. AI does dynamic data work locally, then pushes live. SureCart + Access Code Login… 4.4.0v has added [Login with Access Code](https://surecart.com/whats-new/?aff=dffc537c#surecart-4-4-0-access-code-login-at-checkout-new-order-bump-design-surecart-mcp-enhancements-more) feature, allowing returning customers to sign in with a one-time code sent to their email. Also, returning customers are now automatically prompted to log in when their email matches an existing account at checkout. ###### Updates: FluentCommunity, StoreEngine, & Knit Pay FluentCommunity + Welcome Banners… 2.6.0v has introduced the [Course Welcome Banners](https://fluentcommunity.co/blog/fluentcommunity-2-6-0/?ref=223) feature that turns every course into its own landing page. Also, added one-click Lesson Duplication feature to copy any lesson or quiz. Plus, a few UI changes for clearer lock screens, course cards now pick up theme-aware colors based on status, and more. StoreEngine + New Addons… 2.0v of StoreEngine is a major update [bringing 18+ new addons](https://r.freemius.com/18633/1557977/https://storeengine.pro/storeengine-2-0/). This includes: Dynamic Pricing, Advanced Coupons, EU Compliance, EU VAT, Currency Switcher, Order Bumps, Instant Checkout, Embeddable Checkout, Inventory, Multi-Location Inventory, Cost & Profit Tracking, and POS Terminal. Knit Pay + Paypal… 9.4v has upgraded PayPal to the modern JS SDK v6, [unlocking local payment](https://www.knitpay.org/what-is-new-in-knit-pay-9-4/) methods like iDEAL, BLIK, Przelewy24, Bancontact, Trustly, and Venmo for buyers across Europe, US, and many other countries. Also, the Orderbox integration is also now completely free. * **More Product Updates** * NovaShare [new buttons](https://novashare.io/docs/changelog/?ref=34) for MeWe, Cash App, Ko-fi, Venmo. Pocketstore + Woo Apps… the team at weDevs has [launched Pocketstore](https://storepulse.co/pocketstore/), a done-for-you service that ships a fully branded native iOS and Android app for any WooCommerce store. The team handles the build, branding, and app store submission. Store owners fill out a request form and get a live app under their own developer account. Woo + Payment Story… Aaron Bowie has introduced the [payment story feature](https://weareag.co.uk/tls-3-0-introducing-payment-story/) in the AG Traffic Light System (TLS) 3.0 release. It provides a complete visual timeline of the customer’s payment journey, directly inside WooCommerce, to see where and why payment failed. * Win a MacBook: Tutor LMS 4.0 [launch giveaway](https://tutorlms.com/giveaway/?affiliate=iguiding) contest is live. * The PHP [Ambassador Program](https://thephp.foundation/blog/2026/06/19/the-php-ambassador-program-is-open/) is open, scheduled June 30. * **Digging Numbers** * Numbers: WordPress [powers 33%](https://www.gravitykit.com/wordpress-market-share-2026/) of web in 2026, down from 36%. * Study: 97% of llms .txt files [never get read](https://ahrefs.com/blog/llmstxt-study) by bots or humans. * **Insights & Perspectives** * Oxygen Builder [accessibility check](https://accessibilitycraft.com/168-oxygen-builder-accessibility-reality-check-firestone-walker-brewing-805-blonde-ale/), on Accessibility Craft podcast. * **Let’s Learn** * **WordPress on YouTube** * Courtney recreated [new look site](https://youtu.be/2_vvtX8y8IU?si=EvoNPS5HilKbQIWz) in minutes with Airo Builder. * **People of WordPress** WP Weekly issue was missing last week, as I had gone to attend WordCamp Europe in Poland. It was amazing meeting new people and reconnecting with old WordPress folks. Many thanks to Giovanni Cintolo and Alvise Baldassa from Novamira for hosting a lunch ([LinkedIn](https://www.linkedin.com/posts/idavinder_wceu-ugcPost-7474495633282830336-HzlI/), [Instagram](https://www.instagram.com/p/DZds8XmCB-Q/)), introducing Italian cuisine, and exploring the best bits of Venice. See more photos from the event ([LinkedIn](https://www.linkedin.com/posts/idavinder_wceu-ugcPost-7468206296568131585-h8S0/), [Twitter X](https://x.com/idavinder/status/2062440150811205675)): Contributor Day ([LinkedIn](https://www.linkedin.com/posts/idavinder_contributor-day-at-wordcamp-europe-2026-ugcPost-7468308367808155648-Y1Iv/), [Twitter X](https://x.com/idavinder/status/2062544315826548819)), Event Day 1 ([LinkedIn](https://www.linkedin.com/posts/idavinder_wceu-ugcPost-7468754125107671040-vCWm/), [Twitter X](https://x.com/idavinder/status/2062912802247913956)), and Event Day 2 ([LinkedIn](https://www.linkedin.com/posts/idavinder_wceu-ugcPost-7469618631270875136-BAy7/), [Twitter X](https://x.com/idavinder/status/2063841742911148118)). * Lana Miro [shared](https://callmelana.com/how-was-my-wordcamp-europe-2026-in-krakow/), how was my WordCamp Europe 2026? * Elliot Sowersby’s [WCEU Recap](https://elliotsowersby.com/blog/my-wceu-2026-recap/), overwhelming & amazing. * Jonathan Bossenger [shared](https://jonathanbossenger.com/2026/06/wordcamp-europe-2026/) build plugins with AI workshop. * **Videos on WCEU** GoDaddy Cybersecurity Report… GoDaddy has published the [Annual Cybersecurity Report](https://www.godaddy.com/resources/news/godaddy-annual-cybersecurity-report) on the changing threat landscape for websites. This report is a result of an analysis of 932,641 threat detections across 834,661 infected websites throughout 2025. Threat spread was: general malware (41.5%), SEO spam (35.2%), malicious redirects (21.7%), unwanted ads (1.1%), and defacements (0.5%), demonstrating the range of attack categories affecting websites. AI & Bot Traffic Reality Check… Kinsta analyzed more than 10 billion requests across its infrastructure and [compiled a report](https://kinsta.com/ai-bot-traffic/?kaid=JQIEWMOEASGI) on how AI and search bots are impacting websites, revealing the challenges for performance, server resources, and traffic management. Like over 300% bot traffic surge in one year, 1 in 31 web visits is an AI bot, and over 3.75M ‘add to cart’ hits from one bot in 24 hours. ###### Business of WP: Acquisition, Partnership, & Branding Progress Planner Acquisition… Joost de Valk and Marieke van de Rakt, created Progress Planner after Yoast SEO. Progress Planner has been [acquired by Your .Online](https://your.online/bringing-ai-powered-online-possibilities-to-every-entrepreneur/) – with Joost, Marieke, and their team joining the group to lead the development of AI capabilities across its platform. WP Buffs & Equalize Digital… WP Buffs [has partnered with](https://tidd.ly/4vnWJwS) Equalize Digital to support WordPress website owners in tackling website accessibility. The collaboration promises to help WordPress website owners make accessibility part of their regular WordPress website maintenance. New kramakit Brand… Michael Barinov [shared](https://x.com/mikhail_b_/status/2062201641139392571) (Links X) about moving all plugins under one new brand [called Karmakit](https://kramakit.com/). “For now, it’s a simple umbrella site with some information and links to the existing plugin websites. But over time, all content and plugins will live there”. **[Kinsta managed WordPress](https://thewpweekly.com/s-kinsta)** hosting with unparalleled speed, leveraging Google Cloud and the latest C3D servers, it ensures [lightning-fast performance](https://thewpweekly.com/s-kinsta). **[Unblock](https://thewpweekly.com/s-unblockwp)** removes the limits of the WordPress editor. Style anything, add behavior, feed it data, with a built‑in AI assistant, [all inside the editor](https://thewpweekly.com/s-unblockwp). **[FluentCart](https://thewpweekly.com/s-fluentcart)** combines performance, flexibility, and control in one powerful WordPress eCommerce plugin. Easily [sell physical or digital products](https://thewpweekly.com/s-fluentcart), hybrid product listings, subscriptions, memberships, and more. ↑ Community Sponsors supporting this weekly, WP Weekly 295 – Back, The WP Weekly, 01kvqksx5frz996mn7mmgyp6ew.