June 2025 was a truly monumental period for the WordPress ecosystem, marked by the triumphant return of its flagship European conference, significant strategic acquisitions, and continuous advancements in core development and security. From empowering global communities to refining the user experience, let’s delve into the key developments that defined WordPress during June 2025.
June 2025: Acquisitions & Global Gatherings
June 2025 saw major strategic moves and the triumphant return of the largest WordPress conference.
WordCamp Europe 2025 (June 5-7)
The Biggest WordPress Conference! Basel, Switzerland, buzzed with energy as WordCamp Europe 2025 took center stage. Over 1,800 in-person attendees, alongside more than 20,000 online participants from 84 countries, gathered for three intensive days.
Highlights included Contributor Day, which featured 640 contributors across 27 teams and facilitated direct contributions and discussions on sustainability. Keynotes from Matt Mullenweg, Noel Tock, and Jason Mayes explored the future of WordPress, open source’s impact, and the integration of AI. The event celebrated community and inclusion and set the stage for WordCamp Europe 2026 in Kraków, Poland.
Automattic Welcomes Clay (June 12, 2025)
In a significant strategic move, Automattic, the parent company of WordPress.com, announced its acquisition of Clay. Clay is an AI-powered relationship management platform designed to organize and intelligently search users’ networks across various communication channels.
This acquisition aims to integrate Clay’s innovative tools across Automattic’s messaging ecosystem, promising richer, more personalized user experiences and enhancing how people connect and collaborate.
Core & Gutenberg: Refinement & Evolution in June 2025
June 2025 witnessed continuous refinement within WordPress core development and the Gutenberg block editor, focusing on enhancing user experience, accessibility, and developer capabilities.
Gutenberg 21.0 Released (June 11, 2025): This major Gutenberg update brought significant user interface and accessibility improvements. Notable changes included the HTML element being selectable on Button and Separator blocks, extensive refactoring of numerous block settings panels (like Button, Comment blocks, Embed, File, List, Navigation) to use a unified ToolsPanel interface for a more consistent editing experience. Several blocks also received keyboard accessibility improvements, better focus management, and numerous bug fixes.
WordPress 6.8.1 Maintenance Focus: Following the WordPress 6.8 release in April 2025, June 2025 saw the ongoing focus on stability. WordPress 6.8.1, released on April 30, addressed 15 bugs across Core and the Block Editor, ensuring the platform remained robust. Core development in June also saw continued progress towards WordPress 6.7 features (released in November 2024), focusing on refining Data Views, Block Bindings, and performance.
Formation of a WordPress AI Team: A new WordPress AI team was established in June 2025, comprising representatives from major companies like Google and Automattic. This team aims to explore AI integrations within the WordPress ecosystem, coordinate AI projects, and improve collaboration, with community members encouraged to participate via Slack.
WordPress Playground Enhancements: The WordPress Playground saw several improvements in June 2025, including updates to the SQLite driver, enhanced CLI features, and better compatibility with Windows systems. These developments aim to provide a smoother experience for developers working with WordPress.
European Accessibility Act Deadline: A significant deadline loomed in June 2025 as the European Accessibility Act (EAA) came into full effect on June 28, 2025. This legislation mandates that government institutions and private businesses make digital and physical offerings accessible to people with disabilities, fundamentally shaping how websites and digital services are created, especially for those operating in the EU.
Security Landscape in June 2025: Vigilance is Paramount
June 2025 brought a significant surge in disclosed vulnerabilities, emphasizing the persistent and evolving risks across the WordPress ecosystem. Detailed reports from leading security firms clearly depicted the month’s challenges.
Mounting Vulnerabilities & Unpatched Threats
SolidWP’s weekly vulnerability reports highlighted a concerning volume of new issues throughout June:
- June 4: 97 new vulnerabilities (81 plugins, 16 themes), with 38 remaining unpatched.
- June 11: A massive spike of 306 new vulnerabilities (271 plugins, 35 themes), with 172 unpatched.
- June 18: 138 new vulnerabilities (101 plugins, 37 themes), with 63 unpatched.
- June 25: 177 new vulnerabilities (161 plugins, 16 themes), leaving 118 unpatched.
Overall, well over 700 new vulnerabilities were publicly recorded in June 2025 across these four weeks, with a consistent 35–55% remaining unpatched each week, leaving numerous sites exposed to ongoing threats.
Critical Unpatched Flaws Emerge
Beyond the sheer numbers, specific critical vulnerabilities caused significant alarm:
Zita Theme (CVE-2025-52816): Sucuri’s June 30 roundup highlighted a critical Local File Inclusion (LFI) vulnerability in the Zita theme, affecting over 400,000 sites. Critically, no official patch was released in June, emphasizing the urgent need for mitigation.
Forminator Forms (CVE-2025-5341): A medium-severity Cross-Site Scripting (XSS) vulnerability was disclosed in the Forminator Forms plugin, which is active on over 600,000 sites. This flaw could allow attackers to inject malicious scripts under specific conditions. The issue was patched in version 1.44.2, and site administrators are urged to update promptly to mitigate potential risk.
Proactive Protections from Security Leaders
Wordfence Intelligence added 197 new issues (161 plugins, 33 themes) between June 23 and 29, proactively deploying firewall rules for high- and medium-risk vulnerabilities. Similarly, Patchstack-enabled hosts continued to offer vital virtual patches, providing a crucial layer of defense against known exploits.
Key Security Takeaways from June 2025
- Vulnerability Spike: Disclosed vulnerabilities, particularly in plugins, surged significantly, with one week seeing over 300 new cases.
- Unpatched Risk: Vendors left a substantial portion (35–55%) of weekly issues unpatched, creating persistent attack vectors.
- Critical Threats: High-impact flaws, like the LFI in Zita and file deletion in Forminator, underscored the severe consequences of unpatched software.
- Layered Defense: The month reinforced the indispensable value of frequent updates, reliable security plugins with virtual patching, and host-level protections to combat the evolving threat landscape.
Conclusion: The high volume of newly disclosed vulnerabilities in June 2025, combined with alarming rates of unpatched issues and critical unpatched flaws, highlighted the urgent need for proactive defenses. Site owners are reminded that frequent updates, reliable security tools, and host-level virtual patching remain indispensable for protecting their digital assets.
Industry Trends & Insights from June 2025
AI Integration Accelerates: The formation of a dedicated WordPress AI team in June 2025 signals a concerted effort to integrate artificial intelligence functionalities directly into the ecosystem, promising more intelligent tools and streamlined workflows.
Global Community Power: WordCamp Europe 2025 showcased the immense power and engagement of the global WordPress community, particularly through Contributor Day, which directly drives the platform’s development and innovation.
Strategic Growth through Acquisition: Automattic’s acquisition of Clay indicates a trend towards integrating specialized services, especially those leveraging AI, to enhance existing platform offerings and expand into new digital domains like relationship management.
Accessibility as a Legal Imperative: The coming into effect of the European Accessibility Act (EAA) highlighted accessibility not just as a best practice, but as a legal necessity for businesses operating within the EU, driving further accessibility improvements across the WordPress landscape.
June 2025‘s Top Contributors
From security breakthroughs to design excellence, these standout contributors helped shape the WordPress landscape in June. Each played a key role in driving innovation, performance, and community impact.
Plugin of the Month: OptinMonster
OptinMonster stood out in June 2025 as a top-tier conversion optimization plugin. With powerful lead generation tools like exit-intent popups, floating bars, and gamified opt-in forms, WordPress site owners can grow their email lists and improve engagement. The platform’s seamless integration with primary marketing tools and its continued focus on performance and usability made it a go-to solution for marketers looking to boost conversions without sacrificing site speed.
Theme of the Month: Kadence
Kadence remained a leading choice for WordPress users in June 2025, thanks to its lightweight structure, advanced design controls, and deep integration with the block editor. The theme’s pre-designed starter templates and focus on performance enabled users to build fast, professional websites without writing code. Its accessibility-ready foundation aligned well with rising compliance standards, particularly under the European Accessibility Act.
Host of the Month: GreenGeeks
GreenGeeks earned recognition in June for its eco-conscious infrastructure and optimized WordPress hosting stack. It delivered strong performance and reliability with features like LiteSpeed caching, proactive security monitoring, and daily backups. Their continued investment in renewable energy offset and sustainability practices positioned GreenGeeks as a preferred choice for environmentally conscious businesses and developers.
Agency of the Month: Seahawk Media
Seahawk Media continued to impress throughout June 2025, providing targeted WordPress support and educational outreach. They were instrumental in producing hands-on guides for block editing, essential plugin security hardening, and eCommerce optimization, actively helping clients and the broader community navigate the evolving WordPress landscape.
Founder of the Month: Ben Ritner (Kadence WP)
Ben Ritner, founder of Kadence WP, received well-deserved attention in June 2025 for his continued leadership in advancing theme design and WordPress usability. Under his direction, Kadence became one of the most user-friendly, performance-focused themes. His commitment to empowering creators through intuitive design tools has helped shape the broader WordPress theme landscape and inspired a growing community of site builders.
Looking Ahead to July 2025
As June 2025 concluded, the WordPress community eagerly anticipated a dynamic July:
- Continued refinements and new features within Gutenberg, following the 21.0 release.
- Ongoing development and discussions surrounding WordPress 6.7 and future core versions.
- Further progress from the newly formed WordPress AI Team as they explore integrations.
- Heightened focus on accessibility compliance, particularly for businesses operating under the new European Accessibility Act.
- Security teams were expected to remain highly vigilant, spotlighting emergent flaws and necessitating rapid patches across the ecosystem.
June 2025 was a significant period of consolidation and community celebration for WordPress. Groundbreaking acquisitions reshaped the ecosystem, Gutenberg continued its robust evolution, and WordCamp Europe reinforced the platform’s global collaborative spirit. The month highlighted both vibrant innovation and the ongoing need for strong security practices as WordPress moved confidently into the future.
Looking Ahead
Stay tuned for future editions of our monthly WordPress outlooks to track emerging trends, community highlights, and critical updates shaping the ecosystem.