ALLi warns indie authors of WordPress PHP flaw as Kindle Unlimited tops $5 billion payouts

The Reader Times desk 31 October 2026 Based on Alliance of Independent Authors reporting

Engraved illustration of a writer’s study with books, a desk and warm window light. — Editorial illustration for The Reader Times.

ALLi News Editor Dan Holloway alerts self‑publishers to a critical PHP vulnerability affecting WordPress.org and WooCommerce sites, while noting Kindle Unlimited’s $5 billion author payouts and new monetisation tools from Spotify and YouTube.

During the latest Self‑Publishing News podcast, Dan Holloway explained that a newly discovered PHP flaw could compromise WordPress.org installations and WooCommerce stores used by many indie authors.

Holloway advised authors to query their web hosts about the vulnerability and to ensure patches are applied promptly to protect sales pages and membership portals.

He also highlighted three emerging revenue options: Spotify’s recently launched Memberships for podcasters, Kindle Unlimited’s milestone of $5 billion in author payouts, and YouTube’s announced plan to introduce an audiobook service in 2027.

The podcast underscored how these developments intersect with independent publishing, offering both new risks and opportunities for authors managing their own online platforms.