Skip to content

WordPress 7.2 Beta 1 ships, feature freeze starts now

Beta 1 lands with a sudo mode for sensitive admin actions, a new Secrets API for credentials, and SVGs replacing dashicons. Final release is 8 December.

WordPress 7.2 Beta 1 went out today, 20 October, which also marks feature freeze: nothing new gets added from here, only fixes. The final release is scheduled for 8 December, making 7.2 the last major WordPress release of the year.

Two changes matter most for anyone running or extending wp-admin. A new “sudo mode” will force re-authentication before sensitive administrative actions, the same pattern GitHub and other platforms already use. Alongside it, a Secrets API gives plugins a first-class, proper way to store credentials instead of stashing them in options or constants. The admin bar and menu icons are also switching from dashicons to SVGs, which the core team says render more reliably. A new default theme, Ipsum, ships alongside the release, described as an intentionally minimal blank canvas.

Why it matters: if you maintain a plugin or theme, Beta 1 is the point to start testing against, because anything you flag now still has a chance to land before 8 December. The Secrets API is worth planning for specifically: any plugin currently rolling its own credential storage has a proper replacement coming.

The caveat: core’s own roadmap notes list these as actively pursued, not guaranteed. Not everything mentioned here is certain to ship in the final release.

Share

Related reading

More from The Wire

All briefs

GitLab patches a second CVSS 10.0 RCE in nine days

CVE-2026-110264 is an unauthenticated code execution bug in the Onigmo regex engine, reached through Org-mode file previews. It reaches back to 2014 and catches servers already patched for the 12 October flaw.

via GitLab