Articles

Wordpress Article

<hr /> For WordPress, it’s been a long and brutal winter. I don’t need to regurgitate why. You’re probably aware of the feud. If not, you can <a target="_blank" rel="noopener noreferrer" href="https://cmscritic.com/wp-engine-wins-an-injunction-against-automattic-is-the-wordpress-scorched-earth-campaign-over">read my overview</a> of the Automattic/WP Engine drama or <a target="_blank" rel="noopener noreferrer" href="https://cmscritic.com/can-we-heal-the-open-sores-in-open-source-for-wordpress-karim-marucchi-has-a-prescription">listen to my recent podcast</a> with <a target="_blank" rel="noopener noreferrer" href="https://marucchi.com/">Karim Marucchi</a> of <a target="_blank" rel="noopener noreferrer" href="https://www.linkedin.com/company/crowdfavorite/">Crowd Favorite. </a>There are chills a-plenty.The core of this battle has been a persistent lack of control and transparency. With Matt Mullenweg’s hand on the kill switch, WordPress users around the globe have been deeply concerned about the stability of their sites and apps, with many now questioning the democratized promise of this open source project. As Karim noted in our recent chat, securing the software supply chain is absolutely crucial to ensuring the future of WordPress, which powers 43% of all sites on the Internet. In his own words, it’s simply too big to fail, and the market has been yearning for answers. Like all things in tech, change is the constant variable. And there’s been a powerful will in the WordPress community to solve this problem for everyone, from the enterprise down to the mom-and-pop business on Main Street.Today, we might be on the precipice of a solution. Announced this evening during a surprise on-stage appearance at <a target="_blank" rel="noopener noreferrer" href="https://altctrl.org/">Alt Ctrl Org</a> in Basel, the new <a target="_blank" rel="noopener noreferrer" href="https://marucchi.com/introducing-the-fair-package-manager-for-wordpress/">FAIR Package Manager</a> was released to the public, which is now available at <a target="_blank" rel="noopener noreferrer" href="https://fair.pm">https://fair.pm</a>The project – reflecting months of diligent work by roughly 200 people across a blend of participating organizations – will provide a sustainable and transparent path for a secure supply chain for WordPress, including its plugins, themes, and update infrastructure. Along with the package comes a transparent governance model to help ensure a trusted distribution network, which will answer some of the biggest challenges in the current environment.I caught up with Karim and <a target="_blank" rel="noopener noreferrer" href="https://www.linkedin.com/in/jdevalk/">Joost de Valk</a>, the luminary behind the ubiquitous <a target="_blank" rel="noopener noreferrer" href="https://yoast.com/">Yoast SEO plugin</a> and an advisor to many companies in the WordPress community, to discuss the news. The two have long been partners in helping to shape and guide the open source ecosystem, and have actively pursued solutions to the current conundrum. <h3 id="to-be-fair,-what-is-fair?">To be fair, what is FAIR?</h3>At a high level, FAIR is not just a software project – it’s a structural intervention, representing a new way to build open source software that prioritizes the community, respects governance, and aligns with current legislation and long-standing stakeholder needs.On a granular level, FAIR eliminates reliance on any single source for core updates, plugins, themes, and translations, thus enabling federation across the ecosystem from trusted sources. It marshals a fragmented topology by assembling plugins from any source – not just a centralized one – while creating a firm foundation for modern security practices.FAIR also elevates security at the supply chain level, providing improved cryptographic measures and enhanced browser compatibility checking. <figure class="image image-style-align-center image_resized" style="width:79.59%"><img src="https://cmscritic.com/ms-content/uploads/2025/06/image-1749242930911.png" /></figure>Announcement of the FAIR Package Manager at Alt Ctrl Org in Basel. The announcement was made at an apropos moment during the adjacent <a target="_blank" rel="noopener noreferrer" href="https://europe.wordcamp.org/2025/">WordCamp EU event.</a> Representatives from the various groups involved in this project took the stage to splash the news, which is likely to make waves over the coming days and weeks. Attendees at Alt Ctrl Org have been invited to download, participate, and join in the movement as it looks to establish a directed fund at the <a target="_blank" rel="noopener noreferrer" href="https://www.linuxfoundation.org/">Linux Foundation</a> for supporting this project. Karim has been actively engaging with WordPress business owners in an effort to garner support. Over the last few months, he’s noted overwhelming interest from people who have heard the idea of what “could” be, well before the tangible project was released.“Wouldn’t it be nice if it did happen?” he mused, reinforcing the desire of people to sign up and support such an initiative if it materialized. “That's the beauty of these communities, right? If there's a real will of the people to want to make change, it happens.”<h3 id="solving-a-political-problem-with-code">Solving a political problem with code</h3>The palpable fear of an uncertain future has motivated this desire for change. That includes not only the businesses, but the builders and contributors working across the community and within the ranks of Automattic. As Joost noted, people have been scared about the future, treading water while the recent battle has waged. This solution is a sort of digital life ring, and it’s been fully tested and ready to deploy. He shared a bit about how it delivers without disrupting the existing systems.“From an architectural perspective, what’s cool about it is that we're solving a political problem with code,” he said. “It's a plugin, so it doesn't change WordPress itself. WordPress remains WordPress. We add a plugin on top of it, and we replace where it calls ‘home.’”Joost went on to explain how this approach is also solving for compliance challenges, enabling users to manage requests outside of WordPress.org to meet some of the challenges posed by the EU’s forthcoming <a target="_blank" rel="noopener noreferrer" href="https://www.european-cyber-resilience-act.com/">Cyber Resilience Act</a> and mounting <a target="_blank" rel="noopener noreferrer" href="https://gdpr-info.eu/issues/">GDPR issues.</a> <hr /><h4 style="text-align:center" id="-"> </h4><h4 style="text-align:center" id="“from-an-architectural-perspective,-what’s-cool-about-it-is-that-we're-solving-a-political-problem-with-code.-it's-a-plugin,-so-it-doesn't-change-wordpress-itself.-wordpress-remains-wordpress.-we-add-a-plugin-on-top-of-it,-and-we-replace-where-it-calls-‘home.’”">“From an architectural perspective, what’s cool about it is that we're solving a political problem with code. It's a plugin, so it doesn't change WordPress itself. WordPress remains WordPress. We add a plugin on top of it, and we replace where it calls ‘home.’”</h4> Joost de Valk <hr /> “There are a lot of these fixes that could have just happened in WordPress core that we're applying to WordPress through our plugin,” he continued. “So we're augmenting WordPress, we're improving it without changing WordPress itself.”That should provide comfort to enterprises that have been seeking terra firma around larger governance and regulatory challenges at a global level. I asked Joost about the institutional guardrails. This solution is the result of people and organizations within the community versus larger entities. That brings up foundational and even philosophical questions about the project's extensibility and support, and whether we’re trading one source of consolidated control for another.“This is exactly why we're working with the Linux Foundation,” he said emphatically. “Because we didn't want to reinvent that wheel. That wheel has already been invented a couple of times over, and the Linux Foundation has been doing it well for a couple of decades. This is not Joost and Karim doing something – this is the community doing something together with us. We’re the first two spokespeople, but there are loads more. And it's not about any single person or any single company being in control of what we're doing.”Karim built on this, explaining how the Linux Foundation has done an exceptional job of creating a governance model by separating the funding from the technical decisions – and that has worked exceedingly well for many of their projects. This alignment has reinforced FAIR's solvency and ignited interest from the Linux Foundation to support it (you can <a target="_blank" rel="noopener noreferrer" href="https://www.linuxfoundation.org/press/linux-foundation-announces-the-fair-package-manager-project-for-open-source-content-management-system-stability">read their press release</a> about the announcement here).“Even the Linux Foundation was surprised at the personal activism of the WordPress community,” Karim said. “The amount of code that's been written in the last three months wouldn't have been written in any other open source community without funding, right? WordPress is unique in that way, so they worked with us, and we've made a couple of adjustments to their model to recognize the fact that we need to balance the needs of large distribution companies with the community needs, and really try to balance that – which has been amazing.”<h3 id="the-times-they-are-a-changin’">The times they are a-changin’</h3>As Joost relayed to me, this is a “tipping point” moment – not just for WordPress but for the market and industry at large. Open source and the desire for democratization are colliding with some of the institutional trends of the last two decades, and as those monoliths are being challenged, there’s rising optimism around what it can mean for users. “There are just so many reasons why this is a good moment,” he said. “I think in many ways, we've seen ‘SaaSification’ of a lot of stuff over the last decade. And funny enough, I'm European. We're getting back from that because everybody wants to host their stuff themselves again. We want to actually own this ourselves. And I think that WordPress is, of course, in the perfect position to serve those people and actually comply with all the laws that we have in Europe.”There’s also the reality that pricing will rapidly become a key factor in the marketplace. Tools like <a target="_blank" rel="noopener noreferrer" href="https://cmscritic.com/products/shopify">Shopify</a> and <a target="_blank" rel="noopener noreferrer" href="https://cmscritic.com/products/wix">Wix</a>, which are funded and expected to deliver growth, will likely raise their fees. So many businesses are dependent on their all-in-one infrastructures, and in commerce, the margins are getting thinner. As Joost suggests, open source might become a game changer once again as enterprises and small businesses look for ways to reclaim those revenues. <hr /><h4 style="text-align:center" id="-"> </h4><h4 style="text-align:center" id="“the-thing-i'm-mostly-excited-about-is,-if-this-project-is-successful,-it-will-create-for-the-first-time-ever-in-the-history-of-the-internet,-a-content-management-system-that-is-not-reliant-on-any-one-commercial-company.”">“The thing I'm mostly excited about is, if this project is successful, it will create for the first time ever in the history of the internet, a content management system that is not reliant on any one commercial company.”</h4> Karim Marucchi <hr /> “It seems cheaper now, but they're going to raise their prices,” he said. “They are going to do that because they're all PE funded, and they all need to make money, and they need to make more money than they did last year, every year, right? And I think that combination is actually a good market for WordPress in many ways, and for every open source systems.”Karim also shared his enthusiasm for what’s ahead.“The thing I'm mostly excited about is, if this project is successful, it will create for the first time ever in the history of the internet, a content management system that is not reliant on any one commercial company,” he said, glowingly. “We will have a piece of software that is completely distributed and not reliant on any one entity. That is huge. I don't know how an AEM or a Sitecore, on-prem or in the cloud, is going to compete with a CMS that is that nimble, that configurable and composable, that you can actually say it's not open to the whims of any one company.”Without question, this is a big moment for both of these industry leaders – and the community they represent. Will the project be as successful as their ambitions? Only time will tell. We can anticipate a lot of traction as of right now, and like all software, bugs will likely emerge. But this could be the first major step in securing the software supply chain for WordPress and providing the necessary governance to make it sustainable. And maybe – just maybe – finding some peace and prosperity.   <hr /><h4 style="text-align:center" id="looking-for-guidance-on-wordpress?-talk-to-an-expert.">Looking for guidance on WordPress? <a target="_blank" rel="noopener noreferrer" href="https://cmscritic.com/contact">Talk to an expert.</a></h4><hr /> <h3 id="upcoming-events">Upcoming Events</h3> <img style="width:33.07%" src="https://cmscritic.com/ms-content/uploads/2025/05/contentcon25-logo-1747412490394.png" /><h4 id="contentstack-contentcon-25"><a target="_blank" rel="noopener noreferrer" href="https://www.contentstack.com/contentcon">Contentstack ContentCon 25</a></h4>June 3-5, 2025 – Chicago, USAThe future of digital is waiting for you! Contentstack presents ContentCon, the premier event for digital teams and industry leaders who are reimagining the future of digital experiences. Join us for two days of transformative presentations and workshops designed to help you put personalization and AI strategies into action. <a target="_blank" rel="noopener noreferrer" href="https://contentcon2025.site.zuddl.com/">Register today! </a> <img style="width:31.83%" src="https://cmscritic.com/ms-content/uploads/2025/01/cms-connect-2025-logo.png" alt="" /><h4 id="cms-connect-25"><a target="_blank" rel="noopener noreferrer" href="https://www.boye-co.com/conferences/cmsconnect25">CMS Connect 25</a></h4>August 5-6, 2025 – Montreal, CanadaWe are delighted to present the second annual summer edition of our signature global conference dedicated to the content management community! CMS Connect will be held again in beautiful Montreal, Canada, and feature a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. Join vendors, agencies, and customers from across our industry as we engage and collaborate around the future of content management – and hear from the top thought leaders at the only vendor-neutral, in-person conference exclusively focused on CMS. Space is limited for this event, <a target="_blank" rel="noopener noreferrer" href="https://www.boye-co.com/conferences/cmsconnect25">so book your seats today.</a>

All’s FAIR in Love and War: New FAIR Package Manager Aims to Bring Peace to the WordPress Ecosystem

matt-garrepy

Can we heal the ‘open sores’ in open source? For WordPress, Karim Marucchi has a prescription

<hr /> I have a confession: I’ve never been a fan of writing in my CMS. Any CMS, for that matter. And I've used a lot of them.Call me “old school,” but I entered the tech field at a time when computers were a lot more prone to crashing. You can only take so much of that dreaded “Blue Screen of Death” – or watching your work vaporize after an app fails – before developing a solid case of PTSD: Painfully Tragic System Deletion.Over time, things stabilized. Hardware was more reliable, machine-side applications less fidgety, and <a target="_blank" href="https://www.microsoft.com/en-us/microsoft-365/word">Microsoft Word</a> became a de facto standard in the desktop stack. Heck, you could even auto-save your stuff… and that really brought down the blood pressure.But <a target="_blank" href="https://cmscritic.com/what-is-a-content-management-system-cms">content management systems</a>? Meh. They were still subject to the whims of a browser and a web connection. Sessions could be unruly, and it wasn’t uncommon to lose content while drafting a blog post or an article. As such, users like me held to a well-founded distrust of authoring directly in the tool.Of course, there’s more to it than a lack of operational integrity. For a long time, most CMSes treated the content creation experience as an afterthought. WYSIWYG editors provided a shallow proxy for what apps like Word delivered: an intuitive, page-like canvas with lots of freedom to write, comment, share, and collaborate. When <a target="_blank" href="https://docs.google.com/">Google Docs</a> emerged, it solved most of the persistent stability issues with web-based content creation. It also introduced the concept of real-time collaboration within a shared document – which was an all-out game changer. CMSes have certainly improved their editing experiences, stitching together more sophisticated tableaus. Every year, I see regular demos of CMS editors, and they’ve gotten remarkably better. That said, most content professionals don’t like being forced to use a specific tool when it comes to their elemental creative process. Governance notwithstanding, choice is a good thing. But for people like me who prefer a Google Doc, I’m still stuck copying and pasting into a CMS to publish. And that’s a tedious exercise replete with formatting issues that can throw wrenches in the machine.Things get more complicated for larger teams. Writing often happens in one place and design in another. Then, after going back and forth with developers, it all kind of gets “knit” together. Errors show up. Stuff gets siloed. What’s worse: If another team member has the CMS keys and is tasked with copying and pasting, you might need a string of emails or tickets to get a single typo fixed. If this all sounds disjointed, that’s because it is. And the real debt to be paid revolves around time, money, and control. This is where <a target="_blank" href="https://pantheon.io/blog/pantheon-vision-content-operations">Pantheon’s vision</a> plays in. The company – which provides an integrated operations, workflow, and governance platform for Drupal and WordPress – has been helping organizations build, host, and secure their digital experiences since 2010.Late last year, I spoke to <a target="_blank" href="https://www.linkedin.com/in/joshkoenig/">Josh Koenig</a> – Pantheon’s co-founder and CSO – about the company’s consulting <a target="_blank" href="https://pantheon.io/blog/pantheon-and-tag1-support-drupal-7-websites">partnership with Tag1</a> to support Drupal 7 websites. Right on the heels of that, the company announced the launch of a new product called <a target="_blank" href="https://pantheon.io/blog/introducing-pantheon-content-publisher">Pantheon Content Publisher.</a> Content Publisher reimagines the flow for writing, editing, collaborating, and publishing to the web. In a nutshell, this add-on feature enables writers to create in a Google Doc and directly publish to their <a target="_blank" href="https://cmscritic.com/products/wordpress">WordPress</a>, <a target="_blank" href="https://cmscritic.com/products/drupal">Drupal</a>, or <a target="_blank" href="https://cmscritic.com/products/nextjs">Next.js</a> websites – and do it all safely and securely. As a CMS user, Content Publisher satisfies the urgent need for visualization. As you type and edit in your Doc, you’re served a live preview of how content will render on your website. When you’re ready to roll, a single click pushes it to final review and publishing. Pretty slick. <figure class="image image-style-align-center image_resized" style="width:79.62%"><img src="https://cmscritic.com/ms-content/uploads/2025/02/image-1738705229313.jpeg" alt="A person standing at a podium giving a presentation

AI-generated content may be incorrect." /></figure>Roland Benedetti at Boye &amp; Company CMS Kickoff 25. Source:Marta Cukierman During the <a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25">Boye &amp; Company CMS Kickoff 25</a> in January, <a target="_blank" href="https://www.linkedin.com/in/rolandbenedetti/">Roland Benedetti</a>, Pantheon’s Senior Director of Product, showcased this nifty tool during our “CMS Idol” competition. I’ve known Roland since his days at <a target="_blank" href="https://www.linkedin.com/company/ez-systems/">eZ</a> (now <a target="_blank" href="https://cmscritic.com/products/ibexa">Ibexa</a>), and he's always been one to push the envelope. Needless to say, what I saw was impressive, even at a beta stage – and seemed to address key pain points for many of us in the content ecosystem.What you’re reading right now was indeed copied and pasted from a Google Doc. But with Content Publisher, that rigmarole might be a thing of the past. Here’s a quick snapshot of what this promising new product could deliver for content creators. <h3 id="can-pantheon-fix-what’s-broken-with-web-publishing?">Can Pantheon fix what’s broken with web publishing?</h3>Hmm. Where to start? That would be my first question…Look, it's a big mountain, but Pantheon is trying to scale it. As Roland and co-founder <a target="_blank" href="https://www.linkedin.com/in/zacharyrosen/">Zach Rosen</a> stated in their official Content Publisher announcement, “The web used to be simple and fun. It’s increasingly become tedious, flaky, and frustrating.” Hard to argue with that.Also true, as I’ve pointed out in my own case: Content creators aren’t sitting down and writing web content directly into WordPress or Drupal, and there's real data to back that up. According to Pantheon's own research, 90% of writers create, edit, and collaborate on content using (you guessed it) Google Docs and Microsoft Word. <hr /><h4 style="text-align:center" id="-"> </h4><h4 style="text-align:center" id="“the-web-used-to-be-simple-and-fun.-it’s-increasingly-become-tedious,-flaky,-and-frustrating.”">“The web used to be simple and fun. It’s increasingly become tedious, flaky, and frustrating.”</h4> <hr /> With such a significant shift towards Word and Docs for content authoring, little progress has been made in bridging the gap between these tools and the web layer. Given the complexity of modern CMSes, content originating from outside tools is often shifted to specific team members with CMS access and permissions. As Roland and Zach indicated, it’s possible that these human “copy-paste” stakeholders could miss some critical checks along the way – things like confirming mobile responsiveness, ensuring brand guidelines, and even validating digital accessibility. In effect, the disconnect between these entities amplifies liability.There’s also this notion of “democratizing the web” that Content Publisher is endeavoring to solve. As CMS systems become more complex and convoluted, only fully trained platform experts can facilitate the act of publishing. Further, waiting to clean up any formatting or governance issues at the publishing stage can lead to delays, version conflicts, and missed deadlines – all of which can slow down a marketing team or stymie a campaign.<h3 id="how-does-content-publisher-work?">How does Content Publisher work?</h3>I’ve already framed it, and simplicity is a key part of the appeal. First and foremost, Content Publisher has been architected with modern, API-first fundamentals. This composable posture provides the core integration with Google Docs, giving editors an augmented UI. Below decks is a scalable service operating on <a target="_blank" href="https://cmscritic.com/products/google-cloud-platform">GCP (Google Cloud Platform)</a> that handles content discovery and publishing. This surface area exposes authoring and delivery through both REST and GraphQL APIs. Finally, Pantheon powers the core connections to leading web technologies and front-end frameworks via out-of-the-box integrations.From a deployment perspective, the setup is pretty seamless. After you enable Pantheon’s Content Publisher as an add-on in your <a target="_blank" href="https://workspace.google.com/">Google Workspace</a>, you can connect your Google Docs with any website running on Drupal, WordPress, or even Next.js.  <figure class="image image-style-align-center image_resized" style="width:85.15%"><img src="https://cmscritic.com/ms-content/uploads/2025/02/image.png" alt="A diagram of a company

AI-generated content may be incorrect." /></figure>Pantheon’s vision for a creation-production-delivery ecosystem. Source: Pantheon website. I quite like this workflow diagram that Roland presented during his “CMS Idol” intro, which crystallizes Pantheon’s WebOps workflow from creation through ingest to delivery. It elegantly details how they see the broader ecosystem of website and marketing technologies – and it’s clear that more innovation is on the roadmap to bring content, design, code, and teams together. <h3 id="core-capabilities">Core Capabilities</h3>Content Publisher offers some simple yet powerful features. The first is the intuitive direct publishing from Google Docs, where the add-on manifests as a tag-along sidebar while you edit your content.  <figure class="image image-style-align-center image_resized" style="width:81.01%"><img src="https://cmscritic.com/ms-content/uploads/2025/02/image-1738705228530.jpeg" alt="A screenshot of a website

AI-generated content may be incorrect." /></figure>Content Publisher provides access to key features within Google Docs. Source: Pantheon website. This handy panel gives users quick pathways to manage their page metadata, add components like images, and more. Translation: users can deliver structured website content without leaving Google Docs – and that’s good from both a governance and time-saving perspective.  I already mentioned the real-time preview, which delivers visual confidence. As you write, edit, add images, or assemble components, Content Publisher allows you to see how everything will render on your actual website. You can also preview for mobile responsiveness, control your zoom, or even share to collaborate with other team members. <figure class="image image-style-align-center image_resized" style="width:93.05%"><img src="https://cmscritic.com/ms-content/uploads/2025/02/image-1738705228453.jpeg" alt="A screenshot of a computer

AI-generated content may be incorrect." /></figure>Content Publisher gives users a fully-rendered preview with ample control. Source: Pantheon website. One of the questions I immediately had was about governance. This is, after all, Google Docs – and if multiple users are collaborating, how do you control things like publishing permissions? Pantheon is addressing this with a robust editorial workflow that’s built directly into the software, which will ultimately provide a deeper layer of control while checking for things like brand, accessibility, and compliance issues. Powered by <a target="_blank" href="https://cloud.google.com/vertex-ai">Google Vertex AI</a> – a fully-managed, unified AI development platform with access to <a target="_blank" href="https://gemini.google.com/">Gemini models</a> and more – Content Publisher also offers some dynamic features like content summaries, SEO-enhancing metadata suggestions, and advanced search, all guided by user inputs to ensure quality.  <figure class="image image-style-align-center image_resized" style="width:87.2%"><img src="https://cmscritic.com/ms-content/uploads/2025/02/image.jpeg" alt="A screenshot of a computer

AI-generated content may be incorrect." /></figure>Collections allow for seamless structuring of your website’s sections. Source: Pantheon website. We know discoverability is a critical facet of web experience, and there’s some cool stuff happening in Content Publisher from a structural perspective. Using what it calls “Collections,” you can organize documents into sections and sub-sections (like Marketing), curate the order, and choose to hide or reveal them to enhance navigability. You can also define custom metadata schemas, allowing for greater control over your site’s information architecture.<h3 id="the-verdict">The Verdict</h3>While every individual content creator or team works differently, there are some, shall we say, “philosophical” fundamentals we all share. Over time, opinionated tools have guided pathways while driving many of the systemic flaws in modern content operations. In other words, all CMS roads have a common breakdown lane.I applaud Pantheon for taking a bold step towards repairing the cracks in the pavement. It won't be easy, and Content Publisher is addressing just one dimension of where the tooling needs improvement. But their composable approach is driven by choice, flexibility, and adaptability – solid principles for guiding their vision of WebOps and content operations.Let’s be clear: as novel and useful as Content Publisher might be, it’s not a replacement for CMS – it’s more like a companion app that extends the existing boundaries. You still need all the foundational CMS components for your WordPress or Drupal website to realize its benefits. For obvious reasons, Content Publisher isn’t a fit for every kind of content type. It’s perfect for articles, documentation, and other long-form content – stuff you would handily write in a Google Doc (and that might be a good litmus test). Pantheon also suggests test-driving it on your website’s “About” page, and once you’ve mastered the flow, move to more editorially driven content like blog posts or press releases.Personally, I like this tool. I think it will find rapid adoption within organizations, and if you’re someone like me who uses Google Docs, you should take it for a spin. The project is still in beta (<a target="_blank" href="https://pantheon.io/platform/content-publisher#beta">you can request access here</a>), and there are facets of governance that have yet to be fully fleshed out. But the potential is there. Further, if they can unify versioned content with design and code, there could be exciting enhancements on the horizon.At the same time, we’re not really addressing the root problem: that content management systems still haven’t delivered the kinds of rich, trustworthy editing experiences that entice all creators to start within the tool. I know: It’s hard to argue with the robust omnipresence of Word and Docs. So maybe we’ll never get there. Or maybe you can’t teach an old dog new tricks. Either way, I’m sticking with my Docs. And if Pantheon can kill some of the tedious, time-consuming, error-prone copying and pasting, that’s not a waste – it’s a win.   <hr /><h3 id="upcoming-events">Upcoming Events</h3> <img style="width:30.46%" src="https://cmscritic.com/ms-content/uploads/2024/11/cms-summit-25.png" alt="" /><h4 id="cms-summit-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmssummit25">CMS Summit 25</a></h4>May 13-14, 2025 – Frankfurt, GermanyDon't miss the first European edition of our prestigious international conference dedicated to the global content management community! CMS Summit 25 will bring together top-notch speakers, our renowned learning format, and engaging social events. Hear from leading practitioners like Deutsche Bahn, Dr. Oetker, and more – and join customers, agencies, and CMS vendors as we discuss current trends and what's ahead for the content and digital experience fields. Connect and network at the only vendor-neutral, in-person conference focused on CMS. Space is limited for this exclusive event, <a target="_blank" href="https://www.boye-co.com/conferences/cmssummit25">so book your seats today.</a> <img style="width:31.83%" src="https://cmscritic.com/ms-content/uploads/2025/01/cms-connect-2025-logo.png" alt="" /><h4 id="cms-connect-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect25">CMS Connect 25</a></h4>August 5-6, 2025 – Montreal, CanadaWe are delighted to present the second annual summer edition of our signature global conference dedicated to the content management community! CMS Connect will be held again in beautiful Montreal, Canada, and feature a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. Join vendors, agencies, and customers from across our industry as we engage and collaborate around the future of content management – and hear from the top thought leaders at the only vendor-neutral, in-person conference exclusively focused on CMS. Space is limited for this event, <a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect25">so book your seats today.</a>

'Copy and Paste' Makes Waste? Not with Pantheon’s Content Publisher for Google Docs

<hr /> If you haven't heard, there was some legal news yesterday. Big news.I’m not talking about the <a target="_blank" href="https://www.npr.org/2024/12/10/nx-s1-5224170/infowars-alex-jones-the-onion-bankruptcy-judge">failed bid by satirical media site The Onion</a> to buy Alex Jones’ far-right empire, including the defrocked Infowars website. Yesterday, a bankruptcy judge squashed the deal, ruling that the auction process was unfair. No, I’m speaking of the other statutory quagmire weighing down the CMS world: the ongoing drama betwixt <a target="_blank" href="https://automattic.com/">Automattic</a>, the parent company of <a target="_blank" href="https://wordpress.com/">WordPress.com</a>, and <a target="_blank" href="https://cmscritic.com/products/wp-engine">WP Engine</a> – a third-party WordPress hosting platform.Conjunction injunction, will WordPress function… for WP Engine? Despite the scorched earth ruckus that’s been playing out, it will – at least based on Tuesday’s ruling. <a target="_blank" href="https://www.theverge.com/2024/12/10/24318350/automattic-restore-wp-engine-access-wordpress/">According to The Verge</a> (which has done yeoman’s work covering this blusterous saga), a California district judge ordered Automattic to cease blocking WP Engine’s access to <a target="_blank" href="https://wordpress.org/">WordPress.org</a>. This includes removing the <a target="_blank" href="https://wordpressenginetracker.com/">“WP Engine Tracker”</a> that Automattic deployed, listing the number of sites that have left the hosting platform since the start of the dispute – which has fallen precipitously since September 21st – and tearing down the now <a target="_blank" href="https://www.theverge.com/2024/10/9/24266426/the-latest-volley-in-the-wordpress-beef">infamous checkbox</a> on the WordPress login that asks users to verify they’re not affiliated with WP Engine. <img style="width:79.97%" src="https://cmscritic.com/ms-content/uploads/2024/12/wordpress-wpengine-tracker.png" alt="" />The WordPress WP Engine Tracker, as of December 11, 2024. Image: CMS Critic Further, Automattic and its <a target="_blank" href="https://www.linkedin.com/in/mattm/">CEO Matt Mullenweg</a> will have to relinquish their control of WP Engine’s <a target="_blank" href="https://www.advancedcustomfields.com/">Advanced Custom Fields (ACF) plugin</a>, a popular WordPress resource that allows developers to create custom content fields for websites. In many ways, this was the hot potato in the proverbial oven, as many WP Engine customers were furious about the uncertainty surrounding its status.<h3 id="just-to-recap-the-backstory">Just to recap the backstory</h3>After the initial action from Automattic, WP Engine <a target="_blank" href="https://www.theverge.com/2024/10/3/24261016/wordpress-wp-engine-lawsuit-automattic-matt-mullenweg">filed a lawsuit accusing</a> Automattic and Mullenweg of doing “irreparable harm” to its business, asking the court to intercede and restore WP Engine’s access to <a target="_blank" href="http://wordpress.org/">WordPress.org</a>. That court filing led to a contentious and very public campaign against WP Engine, in which Mullenweg called out WP Engine for misuse of the WordPress trademark. Perhaps in a more scathing rebuke, he also suggested the company had not been good stewards of the WordPress open source community, failing to sufficiently contribute to the platform’s ongoing innovation.For the record, I tried reaching out to multiple sources since the beginning of the drama. This includes trusted open source community members and people on the inside from both ends of the spectrum. Unfortunately, given the legal sensitivities, no one was willing to comment at the time. Now that a ruling has materialized – albeit preliminary – there might be more transparent reflection from all parties. We’ll see.Has this entire episode shaken the confidence of WordPress developers and practitioners? No doubt about it. Just read the tirade of social media comments that criticized both parties. Additionally, there’s been mounting negativity from contributors who have been vocal about their perception of the situation – a signal that things could be shifting in the future as developers assess the aftermath of this episode. The dispute has also exposed a fragile vulnerability that perhaps rivals zero-day open source security exploits, demonstrating how the human factor (vis-à-vis the politics of ego and the pursuit of profit) might present unforeseen risks to WordPress agencies, businesses, and the ocean of community developers.<h3 id="so-what-happens-next?-">So what happens next? </h3>Historians might be grappling with this chapter of web legacy for years to come. A lot depends on the fallout. There has been direct and collateral damage, to be sure – and given the visible personalities involved, we can probably expect further action. Does that mean more bellicose rhetoric? We’ll have to wait and see. From a more existential framework, I would contend that WordPress isn’t projecting the same level of gravitas it once did. To be clear, I spent a season of my career building, managing, and migrating to and from this CMS. I know it well. Maybe too well. Heck, the previous version of this blog was powered by WordPress and hosted on WP Engine and I rarely had any issues. It was stable and reliable. Sure, I had to facilitate updates and manage our custom-built plugins. But having that level of control was part of the fun, part of the magic that is website design and development. Maybe the operative question is: will WordPress continue to be a place where fresh minds and ambitious young developers flock to? Today, it still powers the largest share of websites on the open web, but is it in danger of becoming less relevant? Is a situation like this serving as a lynchpin for change – or a stark reminder that it is no longer the up-and-coming disruptor that it once was?I believe in open source. We all use it up and down the stack, from Linux to Docker. It is fundamental to how we code and create. On the CMS level, I’ve vocally advocated for the analyst community to give open source platforms the fair shake they deserve in the scope of their grids. I’ve also written about the efforts of organizations like the <a target="_blank" href="https://cmscritic.com/drupal-joomla-typo3-and-wordpress-join-forces-in-new-open-website-alliance">Open Web Alliance</a> and <a target="_blank" href="https://cmscritic.com/the-swiss-dont-miss-on-open-source-how-switzerlands-embag-law-is-evolving-the-oss-landscape">countries like Switzerland</a> that are embracing open source in meaningful ways. At the same time, users and practitioners ought to have material opportunities for generating equitable revenue by using open source software as part of their business strategy. As these platforms aired their dirty laundry on a very public stage, they've been influencing the decision-making for new and existing developers and businesses, perhaps deepening the rift and raising questions about the solvency of building in this ecosystem. Will that manifest in slowing growth? Again, the historians will love unpacking this. If you visit Automattic’s website, the first thing you’ll read is a very simple mission statement: “We are passionate about making the web a better place.” If that’s true, then maybe tearing down the oligarchical power structures is the first step. And that’s not directed towards one side of the field. There’s plenty that can be done to reinforce better standards, greater transparency, and generally “good karma” from both Automattic and WP Engine. Both parties have beneficial attributes, and both had solvent points to make in this dispute.Regardless of the outcome, we can agree that leaving builders and businesses in limbo is the least constructive way to maintain trust. Hopefully, we can leave the scorched earth behind – and focus on green fields.  <hr /><h4 style="text-align:center" id="looking-for-guidance-on-wordpress-or-wp-engine?--talk-to-us.-">Looking for guidance on WordPress or WP Engine?  <a target="_blank" href="https://cmscritic.com/contact">Talk to us. </a></h4><hr /><h3 id="upcoming-events">Upcoming Events</h3> <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-2025"><a href=" https://www.boye-co.com/conferences/cmskickoff25">CMS Kickoff 2025</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaMeet industry leaders at our third annual CMS Kickoff – the industry's premier global CMS event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, <a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">so secure your tickets today.</a> <img style="width:30.46%" src="https://cmscritic.com/ms-content/uploads/2024/11/cms-summit-25.png" alt="" /><h4 id="cms-summit-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmssummit25">CMS Summit 25</a></h4>May 13-14, 2025 – Frankfurt, GermanyDon't miss the first European edition of our prestigious international conference dedicated to the global content management community! CMS Summit 25 will bring together top-notch speakers, our renowned learning format, and engaging social events. Hear from leading practitioners like Deutsche Bahn, Dr. Oetker, and more – and join customers, agencies, and CMS vendors as we discuss current trends and what's ahead for the content and digital experience fields. Connect and network at the only vendor-neutral, in-person conference focused on CMS. Space is limited for this exclusive event, <a target="_blank" href="https://www.boye-co.com/conferences/cmssummit25">so book your seats today.</a>

WP Engine wins an injunction against Automattic. Is the WordPress 'scorched earth' campaign over?

<hr /> Data is, without question, the most valuable currency to any business. That said, digital analytics have taken on a pronounced role in making data actionable and impactful to an enterprise – particularly when it comes to its products and experiences.<a target="_blank" href="https://cmscritic.com/products/amplitude">Amplitude</a> has long established itself as a leading platform in the digital analytics space, due in no small part to its scope and range. It enables organizations to build better products by tracking and translating user behavior, allowing stakeholders to gain deeper insights into critical facets like engagement, retention, and revenue. One thing that sets Amplitude apart is its elegant, event-based analytics capabilities, which transmit in-product interactions and behaviors in real time. This is especially valuable for organizations mapping the user journey across digital experiences powered by CMS or marketing automation tools. To that end, Amplitude recently launched a set of new and expanded integrations that will make it easier for businesses to understand customer activity and leverage analytics to maximize the potential and performance of their experiences. Among the new tools is a <a target="_blank" href="https://cmscritic.com/products/contentful">Contentful</a> plug-in for marketers that provides no-code testing features, as well as an enhanced <a target="_blank" href="https://cmscritic.com/products/hubspot">HubSpot</a> integration designed to improve email campaign results and analysis. There’s also a new <a target="_blank" href="https://cmscritic.com/products/wordpress">WordPress</a> plug-in that ingests website data into Amplitude with just one click – powering faster, data-driven website decisions. The company also announced the availability of a new <a target="_blank" href="https://amplitude.com/docs/partners/integration-portal">Integration Portal</a>, designed to speed up and simplify integration development. Now, technology partners will have access to a range of tools and resources – including documentation, code samples, and best practices – to enable their teams throughout the integration process.“We want to provide our customers with the most flexible platform on the market. This means meeting them where they are so they can get the most out of their existing investments,” said <a target="_blank" href="https://www.linkedin.com/in/francoisajenstat/">Francois Ajenstat</a>, Chief Product Officer at Amplitude. “Our expanded partner ecosystem gives customers even more choice to integrate and extend Amplitude to meet their unique needs. Our new integration portal provides the resources teams need to easily and seamlessly build on top of our platform.”<h3 id="enhancing-data-based-decisions-with-contentful">Enhancing data-based decisions with Contentful</h3>With personalization becoming a key objective for marketing teams, having nimble tools that allow for rapid, iterative testing and analysis is paramount. The new <a target="_blank" href="https://amplitude.com/blog/experiment-contentful-integration">Contentful integration</a> is a great example of how a headless CMS and content platform can leverage Amplitude’s analytics to enhance the personalization of digital content – and ultimately improve customer experiences. One major benefit of a composable platform like Contentful is the capacity to build world-class omnichannel strategies. Juicing this with customer data gives marketing and growth teams access to all their content so they can easily build variants for their A/B tests. This also makes it simple to organize and reuse content, which means they have a nearly inexhaustible supply of options for each test variant. <figure class="image image-style-align-center image_resized" style="width:83.25%"><img src="https://cmscritic.com/ms-content/uploads/2024/06/amplitude-contentful-1.png" alt="" /></figure>Creating a new experiment in Amplitude for a homepage hero banner in Contentful Using Amplitude, a company’s web, growth, and marketing teams can run no-code tests using <a target="_blank" href="https://streaklinks.com/B__ewgkSEs1pVgGBMAmfaPnh/https%3A%2F%2Famplitude.com%2Famplitude-experiment">Amplitude Experiment</a> and Contentful. With Amplitude Experiment, teams get the guidance they need to set up tests accurately. Meanwhile, Contentful can build out new messaging and page layouts with just a few simple clicks.  <figure class="image image-style-align-center image_resized" style="width:81.96%"><img src="https://cmscritic.com/ms-content/uploads/2024/06/amplitude-contentful-2.png" alt="" /></figure>Analytics results from a new Contentful hero banner test in Amplitude Amplitude's rich analytics provide a much deeper review of an experiment's performance. Unlocking no-code experimentation also empowers teams can drive growth and ROI faster by executing more tests – and directly impacting their acquisition, monetization, and retention results."A growing number of our customers want to build personalized experiences. But to pull this off, they need to be able to quickly A/B test different headlines, CTAs, page layouts, and more,” said <a target="_blank" href="https://www.linkedin.com/in/krrau/">Karthik Rau</a>, CEO at Contentful. “Our integration with Amplitude makes this process so much easier. Without any help from engineering, our customers can set up an experiment in Amplitude using content they already have in Contentful. Once the test is complete, they can roll out the right experience to the right group of users. It not only helps teams move faster, it empowers them to make more informed, data-based decisions." <h3 id="an-expanding-ecosystem-of-integrations">An expanding ecosystem of integrations</h3>Amplitude has been doubling down on its integration strategy and enriching its breadth of offerings. With more than 130 integrations currently available, including the recently announced <a target="_blank" href="https://streaklinks.com/B__ewhR3t-oOryrAPwbtjQ1x/https%3A%2F%2Famplitude.com%2Fpress%2Fsnowflake-native-amplitude-GA">warehouse-native offering with Snowflake</a>, Amplitude provides customers with a wide range of choices for getting data into – and insights out of – its platform. Along with the Contentful features, Amplitude also launched an enhanced, two-way integration for HubSpot. The plug-in allows companies to bring user cohort data from Amplitude into HubSpot to easily tailor email campaigns or bring HubSpot data into Amplitude for deeper analysis of campaign performance.  From an open source perspective, Amplitude now offers a <a target="_blank" href="https://streaklinks.com/B__ewgsiYg3R8Qy_owjA9zC9/http%3A%2F%2Famplitude.com%2Fblog%2Fwordpress-plugin">new free plug-in</a> for WordPress – the world’s most popular <a target="_blank" href="https://cmscritic.com/what-is-a-content-management-system-cms">content management system</a> that powers over 400 million websites. With the new integration, customers can bring website data from any WordPress page into Amplitude in just one click, allowing marketing teams to quickly gain insights into user behavior to boost engagement and increase conversion rates.Additionally, Amplitude now offers integrations for:<ul><li><a target="_blank" href="https://movableink.com/">Movable Ink</a>: Using artificial intelligence, Movable Ink develops creative content for every customer touchpoint. With the new integration, users can send data from Amplitude to Moveable Ink and automatically generate custom marketing content tailored to each user's preferences.</li><li><a target="_blank" href="https://www.humanic.ai/">Humanic.ai</a>: A marketing automation platform that utilizes AI to unlock growth for product-led companies, Humanic.ai leverages data from Amplitude to give teams the ability to deliver hyper-personalized content that drives higher activation and adoption.</li><li><a target="_blank" href="https://www.unitq.com/">unitQ</a>: Using the AI solutions in unitQ, companies can better understand and take action on user feedback, enabling teams to uncover behavioral insights alongside customer feedback channels to improve onboarding, A/B testing, feature road mapping, and more.</li></ul><h3 id="why-it-matters">Why it matters</h3>Data's true potential is realized when it's made actionable. Deeper insights are essential to every modern data strategy, and leveraging a secure, trusted resource for meaningful and relevant analytics is a mandate for any modern enterprise.Amplitude continues to prove itself a leader and an innovator in the analytics space. Expanding its scope of available integrations and its capabilities for building custom integrations via its new portal makes it more extensible than ever. Given the other analytics tools on the market, few deliver this kind of control, flexibility, and customization.From a CMS perspective, Amplitude’s new plug-ins for Contentful and WordPress provide an indispensable asset for delivering more personalized content at scale. It further supports the enterprise charter to optimize processes, improve conversions, and enhance the value of one-to-one experiences.Also, by providing both Contentful and WordPress options (and presumably more in the future), Amplitude is delivering greater choice for organizations leveraging best-of-breed enterprise or open source CMS platforms.The more you know, the more you grow. It might sound cliché, but that's the promise of good analytics. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Amplitude Launches New Analytics Integrations for Contentful, HubSpot, WordPress and More

<hr /><h4 id="snapshot">Snapshot</h4><ul><li>Drupal, Joomla, TYPO3, and WordPress have formed the new Open Website Alliance</li><li>The organization coalesced after the group penned an open letter to the EU regarding the Cybersecurity Resilience Act</li><li>This marks the first leadership-led coordination to establish a shared structure around common values</li><li>Goals focus on supporting the advancement of FOSS and leading with a “choose open source first” message</li><li>Future plans include greater collaboration and the development of open source standards and best practices</li></ul> The term alliance receives a fair amount of love in technology circles. It makes perfect sense: software companies and organizations have long relied on partnerships to build awareness and grow channel relationships, and having friends can make it easier to scale. One might call such agreements “pacts” or “treaties,” especially if the partnership is between two competitors – or my favorite permutation, cuspetitors. But alliance evokes something distinctly positive. A spirit of assembling strengths, building consensus, elevating numbers, and rallying around a common vision or goal.Of course, as a well-documented Star Wars fan (read any of my previous pieces, I guarantee there's a nod in most), I can’t help but associate alliance with the idea of rebelling against something, of bringing unlikely bedfellows together to stand against an existential threat… like an Empire. Sometimes, it's a bit of David versus Goliath – Luke versus Vader – and there’s an implied scrappiness to that. One that’s indelible to the ethos of the cause.In the case of the new Open Website Alliance, an interesting confluence of ideologies is at play. The newly formed cabal betwixt the world’s leading open source CMSs – <a target="_blank" href="https://cmscritic.com/products/drupal">Drupal</a>, <a target="_blank" href="https://cmscritic.com/products/joomla">Joomla</a>, <a href="TYPO3">TYPO3</a>, and <a target="_blank" href="https://cmscritic.com/products/wordpress">WordPress</a> – is very clear in its charter to advance open source interests. But there’s more, and it has to do with the very real challenges that exist for these platforms in an uncertain future of regulatory governance.To get an inside view of the freshly-minted alliance, I spoke to <a target="_blank" href="https://www.linkedin.com/in/mathias-bolt-lesniak/">Mathias Bolt Lesniak</a> – an open source evangelist at <a target="_blank" href="https://www.toujou.com/">toujou</a>, a SaaS website building platform with TYPO3 services based in Norway. Mathias also has TYPO3 in his DNA; he is a previous consultant for the organization, a key part of the TYPO3 association, and a leading voice for the Open Website Alliance. I’d say a trusty blaster is good in any fight. But Star Wars references aside, an alliance is a solid place to start when building a movement. And if any part of the CMS market is focused on “freeing the system,” it’s the open source community. <h3 id="building-on-a-coordinated-response-to-the-eu’s-cyber-resilience-act">Building on a coordinated response to the EU’s Cyber Resilience Act</h3>Perhaps it’s apropos that <a target="_blank" href="https://typo3.org/project/press/press-releases/open-website-alliance/english">TYPO3’s press release</a> announcing the Open Website Alliance was issued from Switzerland. The idea of “neutral ground” further reinforces the compact that connects these otherwise competitive CMSs – which collectively power 50% of all online websites today.As the press release points out, the Open Website Alliance was founded to promote choice across the open source software marketplace and facilitate collaboration between free and open source (FOSS) web content management projects – thus furthering the core values of openness, trust, and quality. But where did this air of collaboration begin? As Mathias pointed out, the Alliance owes its genesis to a coordinated response from the <a target="_blank" href="https://www.drupal.org/association">Drupal Association</a>, <a target="_blank" href="https://www.opensourcematters.org/">Open Source Matters (Joomla)</a>, the <a target="_blank" href="https://typo3.org/project/association">TYPO3 Association</a>, and the <a target="_blank" href="https://wordpress.org/">WordPress Project</a>. The organizations pooled their collective resources to pen an <a target="_blank" href="https://typo3.org/project/press/press-releases/open-letter-to-eu-legislators/english">open letter to the European Union</a> regarding its concerns about the EU’s proposed <a target="_blank" href="https://digital-strategy.ec.europa.eu/en/library/cyber-resilience-act">Cyber Resilience Act</a>. “The Open Website Alliance started out with this letter to the EU,” Mathias said. “We weren't an alliance six months ago, but that was really when Drupal, Joomla, TYPO3, and WordPress got together at a leadership level to do something together. Because we shared a concern – and we had shared values. Of course, there's been collaborations between our communities previously, but this was really the first time that we met on a leadership level – board members and executives, meeting together on one call.<hr /><h4 style="text-align:center" id="“i-think-if-you-want-an-open-web,-you-also-want-to-work-differently-with-your-partners-or-friends-in-open-source.”">“I think if you want an open web, you also want to work differently with your partners or friends in open source.”</h4><hr />At question was the Act’s ban on what it classified as ”unfinished software” and a bevy of muddled definitions surrounding “commercial activity.” In the original text, there's an implicit obligation for software to address all known exploitable vulnerabilities, and maintain a secure default configuration. The latter is particularly problematic, as there’s no way of knowing where and how open source software will be used in projects.  With FOSS products unaccounted for in the original language, open source systems could be liable for safety and security in an untenable manner. These regulations – while viewed as important for maintaining security standards – could potentially hamper European innovation and, as TYPO3 pointed out, drive activity toward U.S. tech giants.“With the Cyber Resilience Act, we discovered there was a real danger for operating as a nonprofit, free and open source content management system – and within the EU, that might actually become very, very hard,” Mathias reflected. “And what hadn't been mentioned yet were two things: first, content management systems within the EU actually represent a little more than half of all websites. Many small to medium-sized businesses use our systems – also larger ones – but that means it would have a great financial impact. The other thing that we saw was that being free and open source means we have certain values, things that we believe in, like openness and free speech. These values very much aligned with the core values of the European Union, so we thought it was an important message to give. It isn't just about business, it's also about the values behind what we do.”The open letter to the EU was issued in July of 2023. In early December, the language of the Cyber Resilience Act was agreed upon, paving the way for its adoption this year – and obligations being phased in through late 2025 and into 2027. As the Act continues to unfold, the Open Website Alliance aims to stand in solidarity against any measures that might impact their collective viability – and together, help shape solutions for all open source communities. <h3 id="collaborating-at-a-leadership-level">Collaborating at a leadership level</h3>In addition to the general community participation, the Alliance is guiding its breadth of members on a leadership level. This means the respective organizations can more easily coordinate on strategy and actions, creating a unified platform that powers new and existing cross-community collaboration projects.Leadership of the organization is also based on collaboration. While by-laws and other institutional practices have not yet fully gestated, the presidency will rotate among the members, and all decisions will be consensus-based. That said, it is by no means an established authority with centralized control or governance. Given that, I asked Mathias how he might describe its makeup and structure. “The Open Website Alliance is a very simple construction,” he relayed. “It doesn't have a formal legal body, so it’s more of a collaboration space – a community of communities, as we say. So it’s up to each member to do what the Alliance encourages.” While still nascent, Mathias did share that some of the operational components of the Alliance are already taking form. As someone who has been involved with numerous associations like this – including the well-established <a target="_blank" href="https://cmscritic.com/mach-alliance-publishes-first-annual-report-showcases-industry-impact-and-plans-for-2024">MACH Alliance</a>, which shares common traits with this new organization – I’ve seen how the right operational bedrock is key to building success.<h3 id="expanding-to-include-other-open-source-cmss">Expanding to include other open source CMSs</h3>I asked Mathias about the roadmap beyond the quintet of founders. While the four open source software communities represent a significant part of the market, many other technologies have embraced FOSS. As part of its charter, he said that the Open Website Alliance is also encouraging other FOSS CMS platforms to apply for membership.“We have seen interest from other free and open source projects or content management systems that would like to join the Alliance,” Mathias reported. “So it's open for anyone who has an <a target="_blank" href="https://opensource.org/">OSI (Open Source Initiative)</a> and a verifiable free and open source license. But in addition to that, the charter also specifies that members have to agree to the <a target="_blank" href="https://www.drupal.org/association/open-web-manifesto">Open Web Manifesto</a>, which I know that Drupal and <a target="_blank" href="https://www.linkedin.com/in/buytaert/">Dries Buytaert</a> (CTO and founder of Drupal and Acquia) have been promoting previously.”It's true: the vision of a free and modular web has long been part of the open source zeitgeist, due in no small part to the contributions of Dries Buytaert and the Drupal community. As Mathias said, the Alliance has taken the core Drupal manifesto and generalized it – a bit – to render it less specific to a single platform, and more reflective of the Alliance makeup.“I think if you want an open web, you also want to work differently with your partners or friends in the open source.”<h3 id="standing-together-for-open-source">Standing together for open source</h3>The <a target="_blank" href="https://typo3.org/fileadmin/t3o_common_storage/documents/press_releases/2024-02_Open_Website_Alliance/Open_Website_Alliance_Charter.pdf">purpose statement</a> the Alliance has developed provides the most basic tenets of its goals. It states, “members commit to jointly encourage prospective website owners and developers to always choose open source software over proprietary systems, and to educate why this decision is the first and most important one in a website project. Through this advocacy, we are expanding opportunities for all open source CMS projects.”As previously noted, the collaboration also seeks to benefit the public perception of open source projects – that they lean on the reliability of open source software, and are supported by the “quality and safety of open source communities.” This community aspect is key, as it speaks to the potential for members to share and discuss best practices in an open source vein. But there’s more. Accounting for the distributed and collaborative nature of open-source software – even beyond content management – the Alliance strives to support the growing reality of upstream dependencies. I asked Mathias to elaborate on this, and he focused on the evolving need for standards.“We see upstream dependencies that are increasingly dependent on much of the same technology, but in different ways,” he said. “That will be interesting as soon as we get in Alliance members that don't use PHP, but I think it's also at an idea level. If you look at what the European Union is doing today, they are putting requirements on people who work with open source, just as they do with closed source – and that means we have to develop standards. We have to develop common ways so that we're not all standing by ourselves when there's suddenly a [new] requirement for data interchange, which is a part of the new data regulation."By being proactive, Mathias believes the open source communities of interest can now plan more effectively and coordinate how they work. Through consensus, they can agree on suitable standards to help govern things like security and maintenance, which involve increasingly more upstream dependencies. “It means that we have to care just as much about each other as we care about the systems that we use.”<h3 id="what’s-next?">What’s next?</h3>As someone who has built and managed projects in both Drupal and WordPress, I’m deeply familiar with the advantages and disadvantages. Regardless of their inherent differences – or how proprietary systems might challenge them – I’ve always viewed their “open sourceness” as an innate strength. Perhaps the most valuable asset for each is its fiercely loyal community, which represents the real power and potential for the Open Source Alliance to realize change at an industry and regulatory level. When I make the obvious comparison to other industry alliances, I can’t help but think of lofty goals woven around voluminous mission statements. But open source is a different beast, beating its own drum and operating at times like a distributed hive mind. The users and contributors are vast and diverse, and the wheels of change often grind more slowly in these corners. At the same time, they're also tacitly independent – part of its democratic appeal, in truth – and that could stymie the adoption of rules and practices.I asked Mathias a logical question: what’s ahead? What do the next 12 months look like? His answer was refreshing – because it was simple and honest:“We don't have that written down,” he said, “but there are things we are talking about at a leadership level. Having an Alliance means that it's much easier for us to say, well, we want to do something together to improve how we standardize security, and then that can be disseminated from a leadership level down into the community. Another is a very simple thing, and that is attending each other's conferences. I've been attending a few other CMS conferences, and there is so much we can learn just from how our communities are organized. So community best practices are a very important thing to improve quality. We have good quality, but we can always improve on that.”For Mathias, education is also a big part of the equation. From his perspective, shifting the narrative is paramount, and leading with an “open source first” mentality is key to helping businesses, agencies, and users make better decisions. “I had the idea that what we need to do is educate the bits,” he said. “Tell people first what open source is instead of haggling about which system is best versus proprietary. So we agreed to collaborate on promoting open source as sort of a ‘white label’ thing that incorporates a lot of benefits that are common [to] all our systems, and that's where choosing open source first came in. We encourage decision-makers who are looking for content management systems to make that choice first. And once they're there, they have a lot more choice.”Mathias reinforced that collaboration underscores everything, and how the founding systems and communities are going beyond sharing best practices and working to understand each other better. “We think it's a benefit for all open source that we know each other, and that we can help every client choose the best open source CMS or find the best agency that has the experience that they need.”Alliances often present themselves as business opportunities. But sometimes, they emerge at a moment of great change or crisis, when hope is running low and great threats stand in the way of progress. When considering the more altruistic motives of open source – of the free and open web – it’s clear that this new alliance is focused on more than just the financial implications of impending regulation. In this case, open source is more like an open force for good – and one to be reckoned with.  <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Drupal, Joomla, TYPO3, and WordPress Join Forces in New Open Website Alliance

Europe's <a href="https://digital-strategy.ec.europa.eu/en/library/cyber-resilience-act" target="_blank">Cyber Resilience Act</a> (CRA) has been a lightning rod of hope and controversy for some time. The proposal, which would regulate cybersecurity requirements for products with digital elements, is meant to bolster rules for hardware and software and help enhance security in a world of evolving threats.
The CRA legislation targets a broad array of categories, including Internet of Things (IoT) devices, computers, smartphones, and applications – and institutes a range of new requirements for manufacturers to improve their product security. 
At the same time, the CRA has been viewed by some as a <a href="https://www.eff.org/deeplinks/2023/05/eus-proposed-cyber-resilience-act-raises-concerns-open-source-and-cybersecurity" target="_blank">threat to open source software</a>, which has enabled innovation and fueled the growth of the modern internet. Open source projects like <a href="https://kernel.org/" target="_blank">Linux</a> and <a href="https://www.apache.org/" target="_blank">Apache</a> are used freely and integrated into a bevy of products, where they power digital services for billions of users across the globe. 
Given these concerns, representatives from <a href="https://www.cmscritic.com/what-do-industry-experts-expect-for-the-drupal-10-launch-heres-what-they-told-us/">Drupal</a>, <a href="https://www.cmscritic.com/joomla-cms-turns-16-celebrates-with-long-awaited-release-of-version-4-0/">Joomla</a>, <a href="https://typo3.org/" target="_blank">TYPO3</a>, and <a href="https://www.cmscritic.com/wp-engine-releases-worlds-first-study-of-the-wordpress-economy-cites-awe-inspiring-numbers/">WordPress</a> communities have banded together to address EU legislators amid the ongoing CRA amendments process. This week, the consortium penned an open letter highlighting the possible impacts of the CRA on <a href="https://en.wikipedia.org/wiki/Free_and_open-source_software" target="_blank">Free and Open Source Software (FOSS)</a> Content Management Systems (CMS).
Combined, these four CMSes power more than half of all websites around the world and play a critical role in driving a competitive European economy and enabling cross-border collaboration.
<h2>What are the concerns for open source CMS under the CRA?</h2>
One of the core issues with the CRA deals with proposed liabilities for commercial activity that results in security vulnerabilities. This would impact open source developers who solicit support or donations, making them responsible for damages due to a security issue even if they didn't produce the product itself. Such costs could put an unfair burden on smaller shops and individual developers that can't afford the operational and administrative costs to meet these requirements. 
There's also chatter about the risks involved with a proposed 24-hour reporting mandate for disclosing actively exploited vulnerabilities – which may, ironically, result in more threats from heightened visibility and inadequate remediations. 
It goes without saying that open source content management systems have profoundly impacted the evolution of digital experiences. WordPress – the most popular in the field – powers roughly 810 million websites globally, representing <a href="https://kinsta.com/wordpress-market-share/" target="_blank">43% of the overall category</a>. CRA could irrevocably change how open source CMS platforms are used in Europe, sending a ripple effect across the software industry with myriad consequences.  
<h2>Open source matters in the CMS market</h2>
To be fair, the CRA isn't being demonized by this consortium of open source projects. As advocates for enhanced security in European hardware and software, <a href="https://www.opensourcematters.org/" target="_blank">Open Source Matters</a> (a non-profit supporting Joomla) and the FOSS CMS communities behind this letter commend the legislative goals of the CRA. However, there are concerns regarding the potential negative impact of the proposed regulations on FOSS development and innovation within the EU.
"Individuals, SMEs, and institutions will be hampered either by enormous administrative burdens or a chilling effect on their activities (and a potential rush towards the American Tech Giants) for fear of risking penalties under the CRA. [...]", the letter states. "As mentioned by many other commenters...large and enterprise-class businesses may be the only ones able to profitably sustain the administrative burden of CRA compliance, quelling EU innovation, entrepreneurship, and economic livelihoods."
The letter proposes solutions to ensure continued success and alignment with the EU's goals. This includes clarifying the CRA’s exemption for FOSS and supporting users’ rights and freedoms. The letter also emphasizes the alignment of FOSS with EU core values – including human dignity, freedom, democracy, and equality.
<h2>Meeting with stakeholders to voice concerns </h2>
The proposed CRA regulation joins a platform of digital governance that the EU is spearheading. This includes the <a href="https://www.hrpo.pitt.edu/european-union-eu-general-data-protection-regulation-gdpr#:~:text=The%20General%20Data%20Protection%20Regulation,of%20individuals%20in%20the%20EEA." target="_blank">General Data Protection Regulation (GDPR)</a>, which was adopted in 2016 to provide a strong data privacy framework for European citizens.
GDPR was fully enacted in 2018, and has vigilantly handed down fines to entities small and large. The CRA is following a similar track, giving the EU's cybersecurity agency real teeth to enforce policies as part of its new charter. 
Open Source Matters and the <a href="https://www.thedroptimes.com/tag/inter-cms-working-group" target="_blank">Inter-CMS Working Group</a> (ICWG) have invited EU Commission members and other stakeholders to participate in a seminar in Brussels early this fall, fostering a collaborative dialogue to address the concerns raised. The seminar presents a cooperative motion from the coalition of open source communities, with the hope that friendly dialogue and collaboration might yield changes to the proposed legislation. 
The letter was signed by:
<ul>
<li><a href="https://www.linkedin.com/in/crystal-dionysopoulos/" target="_blank">Crystal Dionysopoulos</a> – President, <a href="https://opensourcematters.org/" target="_blank">Open Source Matters, Inc</a>. (Joomla)</li>
<li><a href="https://www.linkedin.com/in/josephahaden/" target="_blank">Josepha Haden Chomphosy</a> – Executive Director, <a href="https://wordpress.org/" target="_blank">WordPress Project</a></li>
<li><a href="https://www.linkedin.com/in/olivierdobberkau/" target="_blank">Olivier Dobberkau</a> – President, <a href="https://typo3.org/project/association/" target="_blank">TYPO3 Association</a></li>
<li><a href="https://www.linkedin.com/in/timdoylempa/" target="_blank">Tim Doyle</a> – CEO, <a href="https://www.drupal.org/association" target="_blank">Drupal Association</a></li>
</ul>
As events unfold, more information about the debate and the proposed seminar will be shared.
To read or download the full open letter, visit <a href="https://www.joomla.org/announcements/general-news/5891-open-letter-foss-cms-cyber-resilience-act.html">https://www.joomla.org/announcements/general-news/5891-open-letter-foss-cms-cyber-resilience-act.html</a>
<h2>About Open Source Matters</h2>
Open Source Matters (OSM) is a non-profit organization that supports and promotes the Joomla! open-source project. Its mission is to empower and unite a global community of Joomla users and contributors to cultivate and sustain an innovative and reliable content management system. For more information, visit <a href="https://www.opensourcematters.org/">www.opensourcematters.org</a>.
<h2>About Drupal, Joomla, TYPO3, and WordPress</h2>
Drupal, Joomla,  TYPO3, and WordPress are leading open-source Content Management Systems (CMS) that have significantly impacted the digital landscape. Each platform boasts its unique approach to web content management, catering to diverse user needs. Despite their different approaches to building websites, they share common values, emphasizing collaboration, accessibility, and community-driven development. Together, their collective strength fosters innovation and empowers website creators worldwide.

Drupal, Joomla, TYPO3, and WordPress Address EU with Concerns over Cyber Resilience Act

cms-critic-staff

Content continues to be a crucial marketing strategy for any organization. In fact, <a href="https://www.searchenginejournal.com/content-marketing-statistics/475206/#close">over 70% of B2B and B2C marketers</a> utilize content marketing as part of their overall marketing goals. Couple this with the fact that content marketing has been found to generate three times as many leads as traditional marketing, and you can see why taking a strategic approach is so vital.
Central to a company’s content marketing strategy is its ability to manage its own website content in an efficient and effective manner. A reliable and flexible content management system (CMS) allows you to create, scale, and enhance any piece of content.
Here’s what you need to know about content management systems and how to choose the right type of CMS.
<h2>What is a CMS?</h2>
A CMS is software that gives you the ability to create, manage and publish content for your website. Traditional CMS platforms, like WordPress, are considered monolithic, meaning everything is packaged together, with the front-end design and layout directly tied to the back-end code and database.
Another type of CMS solution is known as a headless CMS. Designed as a back-end only CMS, content is accessible for display on any device using an API. The result is a content-first approach to your CMS platform.
<h2>Differences Between WordPress and Headless CMS</h2>
Traditional CMS options like WordPress are built to display content through a single application, primarily a website. A <a href="https://buttercms.com/blog/what-is-headless-cms/">headless CMS</a>, on the other hand, is designed for content displays across a number of presentations, not just your website.
The differences between monolithic and headless CMS ultimately affect the content creation, operations, management, consistency, integration, and front-end execution of your content.
<h4>Content Creation</h4>
When it comes to creation and structuring of content in WordPress, information is managed through posts and pages. Posts are added to an existing blog and displayed with the newest at the top. Content is tagged into categories as a method of classification. These pages are considered static with the goal of providing information about one particular subject.
In a headless CMS environment, content and structuring are done through a web-based interface. The interface is accessible by content editors and authorized users who can create, edit, organize, and tag specific content. Content is generally stored in a database and available through API, so it can be displayed appropriately on any device.
Some headless CMS platforms, also have the<a href="https://buttercms.com/kb/category/content-modeling-basics/"> option of content modeling</a>, which allows for custom fields and creation of dynamic content and personalization.
<h4>Content Operations</h4>
Once the content is created and structured, it needs to be organized and produced to meet the needs of the target audience – also known as content operations.
In a monolithic environment, content management and organization involve scheduling, automatic notifications when new content is published, and configuring user permissions. Often, this occurs through third-party plugins, which can increase compatibility issues, security vulnerabilities, and more.
In a headless CMS, web-based interfaces can be accessed by any user on any device. WYSIWYG editor options, custom page types, workflow creation, and localization all provide a flexible and dynamic solution to content creation for a wide variety of audiences.
<h4>Content Management</h4>
Content management can be<a href="https://buttercms.com/blog/enterprise-content-management-challenges/"> your ultimate competitive edge</a>, increasing lead generation and conversion. This only happens, however, when you strategically plan your publication calendar.
In WordPress, content management includes SEO optimization tools (typically plugins) as well as automated publishing and scheduling processes.
In a headless CMS, content management is more agile because of the dynamic experience. Based on what device the content is viewed on, a headless CMS can allow for different structures and presentation styles.
<h4>Content Consistency</h4>
In WordPress, content consistency happens through a variety of templates and themes. The standardized look of your website is coupled with specific templates for individual pages and sections. While plug-ins, custom post types, and other items can help aid consistency, there are also several challenges.
Many legacy CMS platforms give users very specific features and functionalities, making it difficult to personalize the experience. In addition, any amount of edits can be time-consuming and difficult to scale.
In a headless CMS environment, content consistency is guided by a set of clear standards for structure, writing, language, tone, and formatting. For instance, a headless CMS could provide custom content types, fields, and typeforms, all centrally located and accessible through APIs.
<h4>Integrations</h4>
Because content does not exist in solely written words, it is important for content teams to pay attention to how content types integrate with one another. In WordPress, this typically happens through third-party plug-ins and themes.
In a headless CMS, things like Rest API, webhooks, CDNs and microservices all handle integration and functionality based on the needs of a particular application. APIs can retrieve and utilize content in the CMS regardless of technology stack or programming language to create a unique, functional user experience.
<h4>Front-end Execution</h4>
In WordPress, front-end rendering is done through code and WordPress templates. Through a system of templates and template tags, you can control the execution of the pages, their structure and layout. In a headless CMS, front-end rendering happens through a separate application that takes the content and places it in an API, resulting in the rendering the user sees.
<h2>The Use of Headless WordPress</h2>
WordPress does have a headless option. However, technically, it’s decoupled, rather than truly headless. That’s because the head is still attached to the backend. In other words, when you use Headless WordPress, you still have to deal, at least partially, with the UI when installing things like main plugins and performing the setup. 
Drawbacks to a decoupled WordPress environment include increased maintenance, need for heightened development experience, plugin dependency, and potential increased cost to get what other truly headless CMS options give you right out of the gate. 
Headless WordPress has several options that could <a href="https://buttercms.com/blog/headless-wordpress-how-to-use-their-blog-data-in-your-app/">benefit</a> organizations who are looking to test a headless approach. However, there are important limitations to consider as you look to align your CMS with long term strategies. 
<h2>How to Decide Which CMS is For You </h2>
There are a number of options to consider when it comes to the use of content for social, web, advertising, internal and more. That’s why it’s important to start at the beginning and develop your digital strategy. Honing your digital strategy will allow you to define your target audiences, set clear goals, audit existing resources, and create a proactive content approach. By understanding what you’re hoping to achieve, you’ll know what the best programs and tools are.
It’s also important to think about where you’re at now and where you’re hoping to go. While a certain product might meet your current needs, looking to the future will help you choose platforms that will grow with you and your company’s content goals.
The best future-proof technology tools will allow you to:
<ul>
<li>Increase productivity and efficiency</li>
<li>Improve the user experience</li>
<li>Allow you to scale</li>
<li>Give you advanced analytics to drive decisions</li>
<li>Enhance search engine optimization</li>
</ul>
Ultimately, understanding your present and future state will help determine the CMS that’s right for you. It’s an exercise that’s worth the time and effort as your website and its content is crucial to success in today’s digital climate. 
 
<hr />
Jake Lumetta is CEO and Founder of ButterCMS, and a CMS Critic contributor.

Marketing 101: Managing Website Content on WordPress vs. Headless

jake-lumetta

Call Tracking + AI 

Call Tracking + AI that Turns Calls into Leads

#ffffff

Another day, another episode of the cybersecurity blues. And once again, WordPress has a starring role.
According to <a href="https://www.bleepingcomputer.com/news/security/new-linux-malware-uses-30-plugin-exploits-to-backdoor-wordpress-sites/" target="_blank" rel="noopener">Bleeping Computer</a>, a previously unknown Linux malware is exploiting over 30 vulnerabilities in outdated WordPress plugins and themes to inject malicious JavaScript.
The malware targets both 32-bit and 64-bit Linux systems. The trojan’s main functionality is to hack WordPress sites using a set of hardcoded exploits until one is successful. The operator would then have remote command capabilities.
WordPress <a href="https://www.searchenginejournal.com/cms-market-share-june-2022/455912/#close" target="_blank" rel="noopener">holds the largest share</a> of the global CMS market, with an estimated 43% of all websites powered by the open source platform. This makes it a big target for hackers, bad actors, and cybersecurity threats – and this is only the latest in a string of complex and nefarious attacks.
<h2>Using plugins and themes to control WordPress websites</h2>
There’s always a risk that any WordPress widget could be a ticking timebomb.
In 2022 alone, researchers <a href="https://siliconangle.com/2022/08/29/researchers-find-malicious-plugins-25000-wordpress-sites/" target="_blank" rel="noopener">found malicious plugins</a> installed on over 25,000 WordPress websites. In most cases, the plugins were procured through legitimate marketplaces. Once added to a website, malware was injected by exploiting a vulnerability – much like this new Linux threat.
Thousands of WordPress websites may be affected by this threat. According to <a href="https://www.scmagazine.com/brief/vulnerability-management/many-wordpress-plugin-flaws-leveraged-by-novel-linux-malware" target="_blank" rel="noopener">SC Media</a>, once attacked, an infected site may be used for phishing and <a href="https://www.imperva.com/learn/application-security/malvertising/" target="_blank" rel="noopener">malvertising</a> campaigns, as well as malware distribution initiatives.
It’s worth checking your WordPress instances to see if any of these affected plugins are in use:
<ul>
<li>WP Live Chat Support Plugin</li>
<li>WordPress – Yuzo Related Posts</li>
<li>Yellow Pencil Visual Theme Customizer Plugin</li>
<li>Easysmtp</li>
<li>WP GDPR Compliance Plugin</li>
<li>Newspaper Theme on WordPress Access Control (CVE-2016-10972)</li>
<li>Thim Core</li>
<li>Google Code Inserter</li>
<li>Total Donations Plugin</li>
<li>Post Custom Templates Lite</li>
<li>WP Quick Booking Manager</li>
<li>Facebook Live Chat by Zotabox</li>
<li>Blog Designer WordPress Plugin</li>
<li>WordPress Ultimate FAQ (CVE-2019-17232 and CVE-2019-17233)</li>
<li>WP-Matomo Integration (WP-Piwik)</li>
<li>WordPress ND Shortcodes For Visual Composer</li>
<li>WP Live Chat</li>
<li>Coming Soon Page and Maintenance Mode</li>
<li>Hybrid</li>
</ul>
<h2>Combatting an evolving landscape of security threats</h2>
With hundreds of millions of active websites across the globe, hackers are having a field day.
According to <a href="https://www.securitymagazine.com/articles/98695-leading-cyber-risks-and-trends-in-2022" target="_blank" rel="noopener">Security Magazine</a>, cyberattacks are on the rise and becoming more sophisticated by the day. Among the top threats in 2022, malware led the pack, representing the highest cost of damage to organizations.  
WordPress, as mentioned, continues to be a growing vector. Case in point: <a href="https://thehackernews.com/2022/12/new-gotrim-botnet-attempting-to-break.html" target="_blank" rel="noopener">The Hacker News recently reported</a> on another <a href="https://www.fortinet.com/blog/threat-research/gotrim-go-based-botnet-actively-brute-forces-wordpress-websites" target="_blank" rel="noopener">Go Trim botnet attack</a> that targeted WordPress website administrator accounts. Botnet malware has the capability to bypass traditional anti-bot protections, making sites even more vulnerable to the standard bot-evasion techniques.
But all is not lost. WordPress CMS administrators can fight back by adopting solid policies around their security practices. By vetting all plugin source code via an experienced DevSecOps team, many vulnerabilities can be uncovered before a plugin is pushed to production. This can augment strong password policies and the use of multi-factor authentication to reduce the surface area for would-be attackers.
WordPress websites can also be hosted in more secure environments like <a href="https://www.cmscritic.com/wp-engine-releases-worlds-first-study-of-the-wordpress-economy-cites-awe-inspiring-numbers/">WP Engine</a>, which disallow certain plugins and themes due to security or performance issues.

New Linux Malware Targets Plugins to Backdoor WordPress CMS Websites

mk-patterson

The "Muskavation" of <a href="https://twitter.com/cmscritic" target="_blank" rel="noopener">Twitter</a> continues, and the social media giant's newly anointed King is forcing many tech companies to reassess their remote work strategies.
Could this mean the end of <a href="https://zoom.us/" target="_blank" rel="noopener">Zoom</a> calls in pajamas and board meetings interrupted by cats?
And who, exactly, is resuming their commute back to the office?
While the remote work phenomenon might be in the rearview for many employees, it seems that developers will continue to drive the trend – and even shape its future. This is according to a recent survey published by <a href="https://www.netlify.com/" target="_blank" rel="noopener">Netlify</a>, a buzzworthy platform that's powering modern web development.
The company announced the findings last week from its third annual <a href="https://c212.net/c/link/?t=0&amp;l=en&amp;o=3700082-1&amp;h=3410126094&amp;u=https%3A%2F%2Fjamstack.org%2Fsurvey%2F2022%2F&amp;a=%C2%A0Jamstack+Community+Survey" target="_blank" rel="nofollow noopener">Jamstack Community Survey</a>, the definitive pulse on global trends across the Jamstack web developer ecosystem. An acronym for Javascript, APIs, and Microservices (the "JAM"), <a href="https://www.cmscritic.com/top-jamstack-static-site-generators-for-2021/">Jamstack</a> is an architectural model that decouples the web experience layer from the data and business logic – improving the flexibility, scalability, performance, and maintainability of modern apps. 
"The Jamstack Community Survey is created by the community, for the community," said <a href="https://www.linkedin.com/in/mathias-biilmann-christensen-a5a3805/" target="_blank" rel="noopener">Matt Biilmann</a>, co-founder and CEO of Netlify. "The findings will not only help developers learn from their peers but also help business leaders better understand how developers can be change makers within their organizations. They can learn about what tools and processes they need to be most impactful."
Along with prognosticating the future of remote work, the survey also revealed interesting data from developers about Web3, the growth of serverless and edge computing, and where content management systems fit in the mix.
<h2>For developers, remote work isn't going away </h2>
As Covid-19 lockdowns become a footnote in recent history, the impact of remote work is undeniable. In the last two years, it has cemented itself as "the new normal." 83% of developers claim to be working more than half the time remotely, while 76% say they've maintained or increased their frequency of working remotely in the last year.
What's clear in the survey results is that remote has become the preferred way of working for developers. In fact, 87% say they enjoy remote work – and an astounding 55% said they would quit their jobs if forced to return to an office. Someone should send Musk the memo. 
According to the survey, 33% of respondents have already changed jobs in the last year, increasing the likelihood that developers will not hesitate to "job-hop" if they need to. It's worth noting that remote work flexibility and career growth opportunities were the most frequently cited reasons for leaving a job, followed by compensation.
Clearly, developers value freedom a little more than finances. At least right now. 
<h2>Web3 hope... or hype?</h2>
<a href="https://en.wikipedia.org/wiki/Web3" target="_blank" rel="noopener">Web3</a> has captured the tech zeitgeist throughout 2022, with <a href="https://www.bloomberg.com/news/articles/2022-11-18/bitcoin-responds-to-ftx-contagion-by-heading-for-a-weekly-gain" target="_blank" rel="noopener">Bitcoin</a> starting the year at around $50,000 to the beleaguered <a href="https://www.cnbc.com/2022/11/15/ftx-says-could-have-over-1-million-creditors-in-new-bankruptcy-filing.html" target="_blank" rel="noopener">FTX exchange just declaring bankruptcy</a>. 
While the concept of a new web composed of decentralized blockchains (DeFi) is intriguing, Web3 has also been the target of mistrust and skepticism. According to the survey, 7% to 10% of developers have tried technologies like cryptocurrencies and non-fungible tokens (NFTs), but only 3% report using them regularly.
To help gauge the hope and the hype for the future, Netlify also asked developers to share their general attitudes toward Web3. The findings were mixed: 42% of developers either don't know what Web3 is (or don't care), while 31% had negative feelings about it.
Bottom line: the survey shows that Web3 is still a long way from mass adoption, and developers continue to be slow and cautious about embracing it. 
<h2>Building better web experiences with serverless and edge </h2>
Jamstack is continuing to evolve the modern web by helping developers build more dynamic websites. Developers are relying on cutting-edge cloud technologies to achieve this, including <a href="https://goserverless.solodev.com/" target="_blank" rel="noopener">serverless computing</a>.
To that end, Netlify's 2022 Jamstack report found that serverless is now officially mainstream: 70% of developers report using it, up from 46% last year – a jaw-dropping adoption rate. Meanwhile, some 47% of developers are experimenting with edge dynamic sites, a sign of the continued innovation happening at the network edge.
Serverless technology is enabling Jamstack websites to grow their capabilities while maintaining the simplicity of development and deployment that is the hallmark of the platform.
<h2>Web frameworks and programming languages </h2>
To build dynamic web apps, developers require flexibility. They want to choose whichever web framework best suits their needs, and they now have plenty to choose from.
Among the landscape of options, <a href="https://www.cmscritic.com/uxpin-merge-review-sync-react-components-with-prototypes/">React</a> continues to be the overwhelming favorite, with 71% of developers reporting they build with it – 3% more than last year.
Riding React's popularity is <a href="https://www.cmscritic.com/top-jamstack-static-site-generators-for-2021/">Next.js</a>, which uses React and is the overall most popular web framework. In fact, 1 in 2 developers (47%) say they have built sites using Next.js in the last year. However, competition remains strong: newer entrants like Astro (11%) and SolidJS (6%) have had promising starts, and Remix (10%) and Sveltekit (15%) have grown steadily year over year. Vite saw an 18% increase since 2021, with a third (32%) of developers using it.
"We're thrilled that a third of the Jamstack community is embracing Vite as they build for the modern web," said Matias Capeletto (aka Patak), from the Vite Core Team. "Vite's usage more than doubled in a year, thanks to being adopted by many modern app frameworks and web tools. The pace of innovation continues to accelerate. Vite's Rollup-based Plugin API allows the ecosystem to share solutions and collaborate in ways we haven't seen before."
Regarding programming language preferences, the great <a href="https://www.typescriptlang.org/" target="_blank" rel="noopener">TypeScript</a> migration continues, with usage growing 110% in the last two years. 21% of developers now call TypeScript their primary programming language, while the number of developers who say the same about JavaScript has dropped from 63% to 53% in the same timeframe. However, JavaScript isn't going anywhere soon: 96% of developers say they use it, even if it isn't their primary choice.
<h2>The CMS of choice is still WordPress, but... </h2>
In the world of Content Management Systems (CMS), things continue to evolve. <a href="https://www.cmscritic.com/wordpress-keeps-classical-editor-alive-acquires-frontity-to-expand-headless-capabilities/">WordPress</a> is still by far the biggest winner, with 37% of devs saying they use it – even though their reported satisfaction with it is lower than many alternatives.
Interestingly, WordPress as a stand-alone CMS is losing share. At the same time, 22% of respondents said that they're using WordPress as a headless API to power a Jamstack website – and that number is growing.
<a href="https://www.cmscritic.com/storybloks-cms-report-shows-enterprises-are-still-scared-of-omnichannel-content-experiences/">Storyblok</a>, a newcomer to the survey, reached 9% usage amongst respondents, a strong showing for the up-and-coming <a href="https://www.cmscritic.com/top-free-headless-cms-platforms/">headless CMS</a>. 
"More and more developers realize the potential of headless architecture in building and deploying better web experiences," said Dominik Angerer, CEO and founder of Storyblok. "At the same time, we believe that the content team utilizing the power of Jamstack with a headless CMS like Storyblok gets the content tools they need and love for creating great experiences on the frontend."
To explore the findings in more detail, you can view the <a href="https://c212.net/c/link/?t=0&amp;l=en&amp;o=3700082-1&amp;h=4098052836&amp;u=https%3A%2F%2Fjamstack.org%2Fsurvey%2F2022%2F&amp;a=full+methodology+of+the+survey" target="_blank" rel="nofollow noopener">full methodology of the survey</a>.
<h2 class="wcag-arialevel-3">About Netlify</h2>
Netlify is the platform your developers love for building highly-performant and dynamic websites, e-commerce stores and web apps. By uniting an extensive ecosystem of technologies, services and APIs into one workflow, Netlify unlocks new levels of team productivity, while saving time and money. As pioneers of the Jamstack movement, Netlify brings together all modern web frameworks, serverless functions and edge computing into one platform to deliver unmatched user experiences. Millions of developers and businesses build with Netlify, from Fortune 500 companies like Unilever and Verizon to companies changing our digital experiences like Peloton and Twilio. Get started for free at <a href="https://c212.net/c/link/?t=0&amp;l=en&amp;o=3700082-1&amp;h=2291442546&amp;u=https%3A%2F%2Fwww.netlify.com%2F&amp;a=netlify.com" target="_blank" rel="nofollow noopener">netlify.com</a>.

Netlify Publishes Jamstack Community Survey, Shows Developers are Driving the Future of Remote Work

Image of the Netlify logo with the icon and text against a dark blue background.

It's been a long, hot summer. Everywhere. So it goes without saying that September is a welcome sign of cooler months ahead.
Speaking of cool, we followed some notable news throughout the month of August. We started with Storyblok's <a href="https://www.cmscritic.com/storyblok-launches-new-cms-experience-to-shape-the-future-of-digital-storytelling/">launch of a new CMS experience</a> that aims to reshape the future of digital storytelling. We also dug into the <a href="https://www.cmscritic.com/salesforce-unveils-composable-storefront-a-digital-commerce-solution-to-help-retailers-go-headless-fast/">Salesforce Composable Storefront</a>, a new digital commerce solution designed to help retailers go headless faster than ever – and another signal that the composable movement is continuing to build steam. 
Finally, we had an <a href="https://www.cmscritic.com/the-future-is-composable-a-conversation-with-new-mach-alliance-president-casper-rasmussen/">exclusive interview</a> with Casper Rasmussen, the new president of the MACH Alliance. He sat down with Matt Garrepy, one of our contributors, to chat about the future of composable, the role of headless, and what's next for the MACH Alliance and its 60+ members. 
As with all things "autumn," change is in the air. Economic forecasts remain uncertain, and many organizations are looking to 2023 with trepidation. While the M&amp;A cycle may have been a little quieter over the summer months, we're still tracking innovation and growth across the CMS and DXP market sectors – and we'll be featuring a number of exclusive interviews with industry leaders over the coming months.
Let's bid summer adieu with a few newsworthy nuggets to read with your pumpkin-spiced latte:
<h2>WordPress Homepage Gets a Fresh New Design</h2>
OK, so maybe this isn't a groundbreaking piece of news. But a redesign of a website is always an opportunity for a brand or company to "clear its throat" before it has something to say. 
That might be the case for <a href="https://wordpress.org/" target="_blank">WordPress</a>, which has certainly done its share of innovating over the past few years – especially with the introduction of <a href="https://www.cmscritic.com/gutenberg-2-years-later-is-wordpress-better-off/">Gutenberg</a>. Now, the open source juggernaut will be greeting us with a <a href="https://make.wordpress.org/design/2022/07/08/project-kickoff-wordpress-org-homepage-and-download-page-redesign/" target="_blank">fresh, new jazzy design</a> on its WordPress.org website. 
<img style="max-width:1000px" src="https://cmscritic.com/ms-content/uploads/2022/08/wordpress-new-design.webp" alt="WordPress new design" />
The <a href="https://wordpress.org/" target="_blank">new homepage</a> brings more attention to WordPress's benefits and experience while highlighting the community and resources to get started on the platform. Meanwhile, the <a href="https://wordpress.org/download/" target="_blank">new download page</a> greets visitors with a keen layout that simplifies the flow and presents both the download and hosting options right at the top.
Overall, a pretty sharp design solution. And no surprise: it's powered by WordPress. 
<h2>Optimizely Presents Opticon 2022: Applying the Science of Growth to Digital Experience Creation</h2>
<img style="max-width:1000px" src="https://cmscritic.com/ms-content/uploads/2022/08/opticon22_savethedate_ads_teaser_1200x628.png" alt="Opticon 2022 Teaser" />
Looking for the optimal conference to attend this fall?
Optimizely, a leading digital experience platform (DXP) provider, announced its first in-person annual user conference, <a href="https://www.optimizely.com/opticon/" target="_blank">Opticon 2022</a>. The event will take place October 3-5 in scenic San Diego (if you're in town, make sure you hit the <a href="https://sandiegozoowildlifealliance.org/" target="_blank">Zoo</a> - it's spectacular). Opticon will showcase how customers and partners are continuously "optimizing" their digital experiences across all channels to drive customer intimacy and business growth.
According to Optimizely, the stakes have never been higher when it comes to competing for customer attention. Businesses need sound strategies to navigate evolving market complexities, advance digital journeys, and elevate future-forward solutions to inspire teams and supercharge growth – resulting in strong, lasting customer relationships. Attendees at Opticon 2022 will hear from marketers, digital leaders, and developers who are achieving these outcomes by leaning into powerful experimentation and frictionless creativity to drive better brand experiences and accelerate revenue growth.
"To be competitive today, marketers need to do more than 'business as usual.' In a rapidly changing world, complexity is the enemy of digital marketing and great digital experiences," said Alex Atzberger, CEO at Optimizely. "To meet your customers every day and adapt, you need data and knowledge about your audience, what resonates with them, when they want to engage, and how they want to be marketed to. Great digital experiences, backed by experimentation and data-driven insights, are what enable continuous possibilities and lead to long-term growth. At Opticon 2022, we're excited to bring leading innovators, marketers, and entrepreneurs to the stage to showcase how applying a scientific method allows you to stay ahead of the curve, amidst an ever-evolving state of customer expectations."
If that content doesn't sound enticing enough, Optimizely is going for the slam-dunk with its celebrity keynote by Earvin "Magic" Johnson, who will share his experiences on what it takes to succeed in a digital-first, customer-centric business landscape. As an NBA legend and advocate for Black entrepreneurship, Johnson will explore how his lifelong commitment to dreaming big has pushed his off-court endeavors to new heights — and how leaders in digital, marketing, and growth can meet this pivotal moment with similar courage to unlock boundless innovation.
To learn more about the keynote session, or to register, visit: <a href="https://www.optimizely.com/opticon/#registration" target="_blank">Opticon 2022</a>.
<h2>Acquia Announces New Digital Asset Management (DAM) Integration with Drupal</h2>
<img style="max-width:1000px" src="https://cmscritic.com/ms-content/uploads/2021/11/acquia_composable.jpg" alt="Acquia logo against a composite background of Tetris-like pieces fitting together, reinforcing the concept of composable DXP" />
<a href="https://www.acquia.com/" target="_blank">Acquia</a>, a leading DXP platform, has <a href="https://www.acquia.com/newsroom/press-releases/acquia-announces-new-digital-asset-management-dam-integration-drupal" target="_blank">announced</a> a new Drupal integration with the company's digital asset management (DAM) solution, <a href="https://www.acquia.com/products/marketing-cloud/dam" target="_blank">Acquia DAM</a> (previously Widen DAM). The solution is aimed at speeding time-to-market for content. 
Using the open source integration, content authors can now leverage Acquia DAM embed codes and manage versioning through the Media Library in Drupal – which has been extended to help users easily find their digital assets via search, metadata, and categories. Acquia DAM makes it simpler to organize and control assets, as well as achieve brand consistency through a centralized, cloud-based library. 
"Content is at the heart of any standout digital experience," said Dries Buytaert, Co-Founder and CTO of Acquia. "With a variety of asset types stored across disparate systems, many content authors struggle to maintain brand consistency as they build digital properties and create campaigns. The new Acquia DAM integration with Drupal makes it easier and faster to leverage brand-approved content, so content authors can focus on launching content rather than hunting down digital assets."
<h2>DigitalOcean to Acquire Cloudways</h2>
<img style="max-width:1000px" src="https://cmscritic.com/ms-content/uploads/2022/08/digitalocean-cloudways-acquisition.jpg" alt="DititalOcean Cloudways logos" />
DigitalOcean is riding a wave of success, and this latest move is a testament to its growth. 
Billing itself as the cloud for developers, startups, and SMBs, <a href="https://www.cmscritic.com/headless-cms-strapi-now-available-on-the-digitalocean-marketplace/">DigitalOcean</a> has carved a strong and loyal niche in the market – particularly as large public cloud providers have continued to dominate the space. Now, with an agreement to acquire <a href="https://www.cloudways.com/en/" target="_blank">Cloudways</a>, a leading managed cloud hosting and software as a service (SaaS) provider for SMBs, its ocean is about to expand. 
According to the company, DigitalOcean's acquisition promises to simplify workflows for small to medium-sized businesses that are looking for easier ways to create and scale their digital businesses. Cloudways will provide simple onboarding and day-to-day management that is purpose-built for certain SMBs looking to outsource their on-ramp to the internet, helping them offload the complexities of cloud infrastructure so they can spend more time running and scaling their businesses. 
The acquisition of Cloudways expands DigitalOcean’s serviceable market within global SMBs and increases options for digital agencies, eCommerce sites, bloggers, freelance developers, and builders hosting on WordPress, PHP and Magento. WordPress is the most popular content management system (CMS) – and according to <a href="https://twitter.com/w3techs?lang=en" target="_blank">W3Techs</a>, it powers 43% of all websites on the internet.
Entrepreneurs and SMBs already choose Cloudways to optimize the performance, value, support, reliability and flexibility of their infrastructure and application management. As a result, they can save time and money while they grow their businesses. Cloudways provides a differentiated offering with an open and flexible platform, an incredible price-to-performance ratio, and superior customer experience.
DigitalOcean and Cloudways have been close partners since 2014. Cloudways currently relies on DigitalOcean infrastructure to power approximately 50% of its customers. Cloudways serves an international and growing customer base with an industry-leading NPS score of 71. Together, DigitalOcean and Cloudways will serve over 124,000 customers paying over $50 per month, representing approximately 84% of the pro forma company’s total revenue.
“SMBs represent more than 50% of global gross domestic product (GDP) and spend $70 billion on cloud infrastructure today. With this acquisition, we are making it easier to launch, build and scale a business on DigitalOcean,” said Yancey Spruill, CEO at DigitalOcean. “Cloudways and DigitalOcean share values around simplicity, community, openness and support that are vital attributes to how we differentiate in the marketplace. Together, we will be focused on providing a simple, easy, intuitive, and trusted platform to better serve SMBs so they can build their businesses and pursue their dreams of entrepreneurship.”
In addition to expanding DigitalOcean’s technology and tooling, the acquisition of Cloudways will also increase DigitalOcean’s global employee base by 30% — adding expertise in key growth areas that will continue to drive productivity and performance across the platform.

CMS Monthly Recap: WordPress Homepage Gets a New Design, Optimizely Announces Opticon 2022, Acquia Introduces DAM Integration, and More

paris-tuzun

Above image of a car driving through an autumn forest, with foliage in a wide spectrum of colors.

It's July, and the world feels like it's melting. Literally. 
As entire continents experience <a href="https://www.axios.com/2022/06/21/heat-wave-records-europe-north-america-summer" target="_blank">record-breaking summer temperatures</a> in the Northern Hemisphere, we're doing what we can to stay cool – and bring you cooler stories from across the CMS and DXP landscape.
This month was hot for a lot of reasons, including <a href="https://www.cmscritic.com/wix-to-host-first-ever-developers-conference-wix-devcon-2022/">Wix's DevCon 2022</a> – the company's first-ever developer's conference – and of course, the annual epic that is <a href="https://www.cmscritic.com/reflections-on-wordcamp-europe-2022/">WordPress WordCamp Europe</a>. Cool stuff indeed.
On the ever-present investment side of the ledger, we covered <a href="https://www.cmscritic.com/kontent-ai-raises-40-million-to-bring-the-power-of-ai-to-content-management/">Kentico's spinoff of Kontent.ai</a> – and the new company's stellar raise of $40 million. Kontent plans to use the funds to further juice its platform with AI innovation, which has been a key focus area since its inception. We also covered <a href="https://www.cmscritic.com/storyblok-launches-1-5m-partner-fund-to-help-agencies-shape-the-future-of-digital-storytelling/">Storyblok's launch</a> of a $1.5 million partner fund to help agencies shape the future of digital storytelling and GraphCMS' announcement that it is <a href="https://www.cmscritic.com/graphcms-rebrands-to-hygraph-launches-new-federated-content-platform/">rebranding to Hygraph</a> and what this means for its future growth. 
Just under the wire for July, Magnolia sent a thunderous boom across the CMS market with news that <a href="https://www.cmscritic.com/genui-acquires-majority-stake-in-magnolia-and-invests-in-future-growth/">GENUI is acquiring a majority stake</a> in its company, with plans to inject significant growth capital. While details were thin, GENUI has forged quite a reputation over the years as a growth engine for technologies, so we'll be watching as things unfold. 
There are a few other stories from July that you might have missed – so turn down the air conditioning and settle in more for more cool stuff. 
<h2>dotCMS Launches Enterprise Cloud Hosting for Single Page Applications</h2>
<img style="max-width:1000px" src="https://cmscritic.com/ms-content/uploads/2022/07/dotcms-interface.webp" alt="dotCMS interface" />
<a href="https://www.cmscritic.com/?s=dotcms" target="_blank">dotCMS</a>, an enterprise <a href="https://www.dotcms.com/blog/post/migrating-headless-cms-hybrid-headless-cms" target="_blank">hybrid-headless CMS</a>, has <a href="https://www.dotcms.com/company/news/dotcms-launches-enterprise-cloud-hosting-for-single-page-applications" target="_blank">announced</a> that <a href="https://www.dotcms.com/videos/enterprise-spa-hosting" target="_blank">the enterprise cloud SPA hosting</a> feature will be available as part of its standard <a href="https://www.dotcms.com/product/dotcms-cloud" target="_blank">dotCMS Cloud</a> offering.
For businesses running multi-channel content-driven sites, one challenge when spinning up a new single-page application (SPA) is where to host it. By leveraging dotCMS' Enterprise SPA hosting, based on AWS Amplify and backed by the global <a href="https://www.dotcms.com/company/news/dotcms-announces-dotcdn" target="_blank">dotCDN</a>, enterprises can speed up development and content delivery for global marketing campaigns without being forced to contract with a third-party vendor.
dotCMS' cloud offering includes features such as:
<ul>
<li>24/7 critical care</li>
<li>Annual core dotCMS upgrades</li>
<li>Up to 99.98% uptime</li>
<li>No API-rate limiting or throttling</li>
<li>Automated security fixes</li>
<li>Native Web Application Firewall (WAF)</li>
<li>Native dotCDN Content Delivery Network to mitigate DDoS attacks</li>
<li>Secure access with Oauth or SAML-based authentication and with IP Whitelisting</li>
</ul>
"We are providing organizations with a way to quickly deliver their content applications to customers around the world," said CTO of dotCMS, Will Ezell. "This latest offering exemplifies our commitment to security and scalability."
With enterprise SPA hosting, development teams can focus on innovation and building engaging applications to support the business outcomes instead of managing the underlying infrastructure. Enterprises can leverage the new service to save hundreds of thousands of dollars annually that they would otherwise spend on administrative and hosting costs.
<h2>Acquia Partners with Workato to Power Enterprise Connectivity to Acquia CDP, Adds Data Subject Deletion Request Features</h2>
<a href="https://www.acquia.com/" target="_blank">Acquia</a>, a leading digital experience company, has made several important updates to its CDP this month. 
First, they <a href="https://www.acquia.com/newsroom/press-releases/acquia-partners-workato-power-enterprise-connectivity-acquia-cdp" target="_blank">announced</a> a partnership with the integration and workflow automation platform <a href="https://www.workato.com/" target="_blank">Workato</a> to power enterprise connectivity to Acquia Customer Data Platform (CDP). They also added new data subject deletion request features that will help their customers comply with the GDPR regulations and privacy laws. Using a new self-service interface, organizations can rapidly process "Right to Erasure" (otherwise known as "Right to be Forgotten") requests associated with regulations such as GDPR, CCPA, and more from their customers. 
Partnership with Workato 
Acquia's partnership with Workato will allow organizations to integrate Acquia CDP with hundreds of external cloud services via secure, enterprise-grade APIs through out-of-box connectors. As the company noted: "The connectivity powered by Workato will help customers achieve even faster time-to-value by reducing the time it takes to get their data from their preferred cloud services into and out of Acquia CDP."
Workato is a leading enterprise automation platform that enables businesses, and IT teams to integrate their apps and automate their business workflows. It has been <a href="https://discover.workato.com/gartner-ipaas-mq/p/1" target="_blank">selected as a Leader in Gartner's Magic Quadrant for Enterprise Integration Platform as a Service</a> for 4th year in a row.
"We're pleased to partner with Workato to add hundreds of integrations between Acquia CDP and marketing, analytics, and commerce applications," said Mark Picone, SVP and General Manager, Marketing Cloud, at Acquia. "The connectivity powered by Workato will help customers achieve even faster time-to-value by reducing the time it takes to get their data from their preferred cloud services into and out of Acquia CDP."
As a part of the <a href="https://www.cmscritic.com/acquia-launches-new-open-digital-experience-platform/" target="_blank">Acquia Marketing Cloud platform</a>, Acquia CDP enables marketers to aggregate and activate data from technologies of their choice into a unified, 360-degree customer profile. From there, marketers can use Acquia CDP to orchestrate personalized, AI-powered campaigns across the entire omnichannel customer journey.
"We're seeing a continued trend around the growing needs for SaaS connectivity, and our partnership with Acquia will allow their communities of partners and customers to keep up with the accelerated demand," said Bhaskar Roy, CMO at Workato. "Not only will they be able to build and leverage robust connectors to their preferred applications, but they will also be able to connect to these applications and automate workflows across them. We're excited to be partnering with Acquia, who has become a leading force in the future of digital experiences by embracing the power of automation."
David Wallace, Research Director, Customer Intelligence and Analytics at IDC, commented: "Digital-first brands must focus on quality, speed-to-value, and agility to deliver the personalized experiences expected by their customers. Customer data platforms help brands achieve their goals not only with productized integrations and APIs but also enterprise-grade, pre-built connectors across an array of digital channels for the flexibility for multiple use cases. Acquia, through its partnership with Workato and inherent low-code tooling enables this increased flexibility."
New Regulatory Compliance Features
Soon after the partnership with Workato, Acquia also <a href="https://www.acquia.com/newsroom/press-releases/acquia-adds-data-subject-deletion-request-features-acquia-cdp" target="_blank">announced</a> they added new regulatory compliance features that help organizations using <a href="https://www.acquia.com/products/marketing-cloud/customer-data-platform" target="_blank">Acquia Customer Data Platform (CDP)</a> to comply with data subject requests and privacy laws in general. 
"This feature for legal and compliance workflows is the latest in a series of self-service updates we're making to Acquia CDP," said Janessa Worrell, Director of Product Management at Acquia. "Our goal is to make it simple for organizations using Acquia CDP to process deletion requests from their own customers, ensuring that these requests are handled quickly. Customers can expect more self-service features in the coming months, removing friction and making common Acquia CDP workflows simpler to execute."
Other recent self-service updates include secure credentials management for Acquia CDP out-of-the-box connectors. Organizations can now generate and manage their own credentials for pre-built connectors to external services such as Facebook or Google.
<h2>WordCamp US 2022 Tickets Sold Out, All Sessions to be Livestreamed</h2>
Two months after the most popular WordPress event, <a href="https://www.cmscritic.com/reflections-on-wordcamp-europe-2022/" target="_blank">WordCamp Europe</a>, has ended, WordCamp US will be hosting its two-day event in San Diego, California, from September 9 through September 11. Like WordCamp Europe, this will be the first in-person event since 2019. 
With the COVID-19 still looming and to allow for adequate social distancing, this year's WordCamp US event is designed as a smaller event - limited to 650 attendees - compared to the previous years. Since it is the first in-person event in two years, the demand was extremely high, and the <a href="https://us.wordcamp.org/2022/tickets/" target="_blank">tickets</a> are already sold out but don't worry. You can watch all the WCUS 2022 sessions <a href="https://us.wordcamp.org/2022/livestream/" target="_blank">online </a>without having to purchase any tickets.
WCUS has also begun<a href="https://us.wordcamp.org/2022/speakers/" target="_blank"> announcing its speakers</a>. This year they are making an increased effort to give more opportunities to underrepresented speakers. 
The opening remarks will begin at 9:00 am on Friday and Saturday, and the sessions will run from 9:15 am to 5:30 pm. The last day of the event will be the "Contributor Day" on Sunday.
You can follow the updates via the <a href="https://paper.dropbox.com/?q=%23WCUS" target="_blank">#WCUS</a> hashtag on Twitter.
<h2>Sitecore Experience Manager Cloud (XM Cloud) Now Available</h2>
<img style="max-width:1000px" src="https://cmscritic.com/ms-content/uploads/2022/07/xmcloud-ui.jpg" alt="SiteCore XM Cloud user interface " />
<a href="https://www.sitecore.com/" target="_blank">Sitecore</a>, a global leader in end-to-end digital experience software, <a href="https://www.sitecore.com/company/news-events/press-releases/2022/07/sitecore-experience-manager-cloud-now-available" target="_blank">announced</a> that it has released its <a href="https://www.sitecore.com/products/xm-cloud" target="_blank">Sitecore Experience Manager (XM) Cloud</a>. This latest product release will provide brands with unrivaled speed to market in implementing customer experiences, simplifying design and deployment, eliminating upgrades, and dramatically decreasing ownership costs. With XM Cloud, marketers can instantly create, manage and deliver engaging omnichannel experiences with an industry-leading enterprise-ready CMS.
According to a <a href="https://www.sitecore.com/company/news-events/press-releases/2022/05/us-brand-authenticity-report" target="_blank">recent survey by Sitecore</a>, online interactions play an outsized role in driving engagement between brands and customers. The digital experience, while valued by consumers, creates a scalability issue for marketers to meet demand. <a href="https://www.sitecore.com/products/xm-cloud" target="_blank">Sitecore XM Cloud</a> provides a comprehensive SaaS CMS for the Enterprise solution for brands by overcoming global scaling problems, including variable traffic, supporting multi-brand architectures, and site security.
For business users, <a href="https://www.sitecore.com/products/xm-cloud" target="_blank">XM Cloud</a> offers the ability to build pixel-perfect digital experiences via a WYSIWYG authoring experience that can access content anywhere, with embedded testing, personalization, and integrated visitor analytics. For developers, <a href="https://www.sitecore.com/products/xm-cloud" target="_blank">XM Cloud</a> can be used with headless development techniques, working with modern frontend frameworks and supporting all deployment scenarios.
"Consumer behavior has changed rapidly over the past two years. Audiences have become very digitally savvy and have an expectation from brands to deliver highly personalized customer experiences," said Dave O'Flanagan, chief product officer, Sitecore. "This puts marketers in the unenviable position of trying to meet this expectation, but with tools and solutions that don't deliver, and in some cases hamstring, the needed agility to meet demand. Sitecore XM Cloud provides marketers with a truly end-to-end, SaaS-based solution that not only helps brands meet consumer expectations but also delivers a best-of-class omnichannel customer experience."
Through <a href="https://www.sitecore.com/products/xm-cloud" target="_blank">Sitecore XM Cloud</a>, the company's entire <a href="https://www.sitecore.com/products/sitecore-experience-platform" target="_blank">Digital Experience Platform</a> can now be delivered through a modern cloud architecture, providing brands and marketers with:
<ul>
<li>Continued innovation – new features and capabilities will be automatically delivered and integrated</li>
<li>Elastic scaling – "set-and-forget" traffic volume demands</li>
<li>Composability – all of Sitecore's platform solutions can now be purchased independently and will fit in a best-of-breed marketing technology stack</li>
<li>On-the-Fly Engagement – rapidly create experiences to meet constantly evolving market needs</li>
<li>Multi-channel content management - create content once and reuse across any channel and experience</li>
<li>Simplicity for marketers – business-focused tools and intuitive content authoring workflows</li>
<li>Agility for developers – customized builds with modern frameworks</li>
</ul>

CMS Monthly Recap: dotCMS Launches Enterprise Cloud Hosting, Acquia Partners with Workato, Sitecore Releases Experience Manager Cloud, and More

Image of beach with CMS Critic Monthly Recap logo over water

Reflections on WordCamp Europe 2022

CMS Summit 25

Find out at CMS Connect 25, August 5 - 6 in Montreal, Canada. Seats are limited.

CMS. Content. AI. Where is it all headed?

Explore a wide range of informative articles on Wordpress, insights, and industry updates. Stay informed and ahead of the curve with our diverse collection of news and posts covering the latest trends and developments in the industry