Today at 5 PM, the practical tech story is simple: WordPress site owners need to confirm emergency security updates, some Dell Windows 11 PCs have a weekend fix for a messy July update, public-interest AI work is getting attention for the right reasons, and Florida shoppers have a useful computer-buying window starting tomorrow.
The Quick Read
- Bad news: WordPress shipped emergency security releases for a critical core issue. If your site has not moved to a patched version, this is not a “wait until Monday” item.
- Good news: WordPress.org enabled forced auto-updates for affected versions, which should help many smaller sites that are not actively managed every day.
- Mixed Windows news: Microsoft released an out-of-band Windows 11 update for a limited set of Dell devices affected by Intel Innovation Platform Framework driver problems after recent updates.
- AI news worth liking: TechCrunch highlighted Current AI, a nonprofit trying to build more open, community-controlled AI resources for languages and cultures that are usually underrepresented.
- Local buying note: Florida’s 2026 Back-to-School Sales Tax Holiday starts Monday, July 20, and includes qualifying personal computers and accessories at $1,500 or less for noncommercial home or personal use.
1. WordPress Site Owners Should Confirm The Emergency Patch
The most important small-business item this weekend is the WordPress security release. WordPress.org says WordPress 7.0.2 addresses one critical and one high-severity issue, recommends immediate updates, and enabled forced updates through the auto-update system for affected sites because of the severity.
Security researchers are tracking the issue as a WordPress core vulnerability chain commonly called wp2shell. Rapid7’s July 17 write-up says a GitHub Security Advisory was published for CVE-2026-63030, a critical unauthenticated remote-code-execution issue affecting WordPress core. NVD’s record for CVE-2026-63030 describes affected WordPress 6.9.x versions before 6.9.5 and 7.0.x versions before 7.0.2, with the REST API batch endpoint route confusion combining with a separate SQL injection issue, CVE-2026-60137, to raise the impact.
For a home user with a personal blog, the action is straightforward: log in, check Dashboard > Updates, and confirm the site is on a patched version. For a business, the checklist should be stricter: confirm the WordPress core version, confirm backups completed before and after the update, test contact forms and checkout flows, and review recent admin users or unfamiliar plugins. If your host manages WordPress updates for you, do not assume it already happened; check the actual installed version.
The IT Guys takeaway: this is exactly why WordPress maintenance should not be treated as a casual monthly chore. Core, plugin, theme, backup, firewall, and uptime checks need a repeatable process. A forced auto-update is helpful, but it is not a substitute for verifying that the site still works and was not already touched before the patch landed.
2. Microsoft Released A Weekend Windows 11 Fix For Some Dell PCs
Microsoft posted KB5121767 on July 18, 2026, an out-of-band update for Windows 11 24H2 and 25H2 devices affected by an Intel Innovation Platform Framework driver issue. Microsoft says the update addresses performance, power-consumption, and system-behavior changes after recent Windows updates, and that a limited number of Dell devices previously blocked from receiving the July 2026 security update can now install this OOB update.
This follows the July 14 cumulative update, KB5101650, where Microsoft says availability was temporarily paused for a limited number of Dell devices using Intel IPF drivers because of an incompatibility with an Intel component. The symptoms being reported around the issue included poor performance, higher heat, battery drain, or unexpected behavior after the update.
For most Windows users, the advice is not to hunt down every out-of-band update manually. Let Windows Update offer the fix if your system is in the affected group. For small businesses with Dell laptops, the practical move is to check whether any staff machines were recently held back, overheating, shutting down unexpectedly, or draining battery unusually fast. If so, verify Windows Update history and install the offered KB5121767 path rather than applying random driver packages from search results.
We also covered this Dell/IPF issue in more detail here: Windows 11 KB5121767 Out-of-Band Update: What Dell PC Owners Should Know.
3. CISA’s Known Exploited Vulnerabilities List Still Deserves A Weekend Look
CISA’s Known Exploited Vulnerabilities catalog is useful because it focuses attention on flaws known to be exploited, not just flaws with scary scores. Recent July entries include Microsoft SharePoint, Fortinet FortiSandbox, Oracle E-Business Suite, Microsoft ADFS, SonicWall SMA1000 appliances, Cisco IOS, Adobe ColdFusion, and multiple Joomla-related products.
That list matters to small businesses even when the product names sound enterprise-heavy. Many offices do not realize they still have an old firewall, remote-access appliance, public SharePoint server, vendor-managed portal, or legacy line-of-business web app exposed to the internet. Attackers do not need your office to be large; they only need one forgotten service with a known exploited bug.
Practical check: keep an inventory of firewalls, VPNs, remote desktop gateways, web servers, NAS devices, website CMS installs, and vendor-managed portals. If you cannot answer “what is exposed to the internet and who patches it,” that is the real problem to fix.
4. Good AI News: Current AI Wants Public Infrastructure, Not Just Private Products
Not every AI story this week is about a giant model launch or another closed enterprise tool. TechCrunch’s July 19 report on Current AI highlights a nonprofit effort to build AI resources that are open, multilingual, and controlled by communities rather than only by large vendors.
The piece points to projects around African language datasets, Arab cultural-history databases, and offline AI tools for Indigenous Amazon communities. For regular technology users, the broader idea is important: AI is not just about who has the biggest data center. It is also about whose language, records, culture, business knowledge, and local needs get represented in the systems people are increasingly asked to use.
Small-business angle: this is a reminder to be careful when adopting AI tools. Ask where your data goes, whether you can export it, whether the tool works for your customers’ language and accessibility needs, and whether your business becomes locked into one vendor’s private workflow.
5. Florida Computer Buyers Get A Tax Holiday Starting Tomorrow
Florida’s Department of Revenue says the 2026 Back-to-School Sales Tax Holiday runs from July 20 through August 20, 2026. The official page lists qualifying personal computers and computer-related accessories purchased for noncommercial home or personal use with a sales price of $1,500 or less.
The helpful part is obvious: families buying a laptop, tablet, desktop, calculator, or certain accessories may be able to save sales tax. The caution is just as important: the computer exemption is for noncommercial home or personal use. Businesses buying equipment for business use should not assume the same rules apply, and Florida’s own sales-tax guidance separates personal purchases from business-use items.
If you are buying a school or home computer this week, prioritize RAM, storage, warranty, and repairability over the biggest sale sticker. For a basic Windows laptop, 16 GB of memory and a solid-state drive are usually more important than a flashy screen size. For a family computer, also budget for a real backup drive or cloud backup, antivirus/security basics, and account recovery setup.
What To Do Before Monday Morning
- WordPress owners: confirm your core version is patched, then test forms, checkout, and admin access.
- Dell Windows 11 users: if you saw overheating, power drain, or shutdowns after recent updates, check Windows Update for KB5121767 guidance.
- Business admins: review internet-facing appliances and match them against CISA KEV entries.
- Florida families: use the tax holiday for the right computer, not just the cheapest one.
- Everyone: make sure your screen locks automatically when you walk away. We posted a short guide today: Make Your Screen Lock Automatically Before You Walk Away.
Sources
- WordPress.org: WordPress 7.0.2 Release
- Rapid7: CVE-2026-63030 wp2shell analysis
- NVD: CVE-2026-63030
- Microsoft Support: KB5121767 out-of-band update
- Microsoft Support: KB5101650 July 2026 update
- CISA Known Exploited Vulnerabilities Catalog
- TechCrunch: Current AI public-interest AI infrastructure
- Florida Department of Revenue: 2026 Back-to-School Sales Tax Holiday