Every nonprofit needs a website. Websites gather attention, explain positions, share announcements, deliver updates, and host content of every kind from viral videos to white papers. Crucially, websites are where so many nonprofits collect an ever-growing majority of all their donations
Yet although everyone needs websites, only a select few are website experts. For such services, nonprofits rely on software solutions and hosting platforms to keep websites live, information accessible, and online donation systems secure.
So what happens when there’s an argument between the people who make your website’s software, and the people who host that software’s place on the internet?
This is what’s happening now with two major providers of online services. WordPress - whose software powers 43.5% of all websites everywhere (that’s over 475 million websites) - and the WP Engine - the world’s leading host of WordPress powered websites.
If you’re a little confused at this point, and imagined that those two are one and the same, that’s part of the problem.
What you need to know
Wordpress-utilising websites that are being hosted on WP Engine servers aren’t receiving automatic software updates.
This leaves those websites vulnerable to everything from persistent minor operating bugs to major breaches of customer security
Certain software plug-ins have already stopped working, including some online donation systems and ecommerce related packages. Given that there are over 70,000 different WordPress plugins available, this could well have a major impact to many organisations. Even though some temporary access arrangements had been made, this had all stopped after October 1st 2024.
Why is this happening?
The back and forth here is between two different entities.
- WordPress, who make the software
- WP Engine, who host the websites
These two companies are NOT the same thing.
Wordpress has worked collaboratively with WP Engine for a very long time, but there have always been some background tensions. Perhaps most notably, WP Engine has disabled the ability to track and see the revision history of everything they post. WordPress regard this decision as one that puts profit-motive ahead of the core values of WordPress itself.
This was a central criticism levied at WP Engine by WordPress founder Matt Mullenweg.
WP Engine responded by sending a cease-and-desist letter to Mr Mullenweg.
Mr Mullenweg then retaliated with a C&D of his own, arguing that WP Engine is infringing on the WordPress trademark. WP Engine argues that their usage of “WP” in this context is protected under fair use.
This is all in part being instigated by the fact that WordPress is developing its own web hosting service platform which will be in direct competition with WP Engine.
What's happening next?
The situation is naturally in flux, so a final overview is not possible at this time. None of the legal battles around this are likely to be resolved soon.
At the current stage, the situation is one for your IT team to be aware of, so that changes can be made as and when needed.
Everfund will be following developments, and will be covering things as and when concrete information is available. Specifically, the kind of information that non-profits, charities, and other third sector operatives can make good use of.
At this stage, no one should be panicking. While it might be tempting to think about moving to another web hosting service or changing your website’s underlying software - both of these would be major costly operations that take a lot of time. The reality is that given the sheer size and scale of both WordPress and WP Engine, it is in both parties’ interest to solve this quickly.
What you need to do now
Charities, nonprofits, and fundraisers of any kind, all need to ask two questions:
- Does your website use WordPress?
- Is your website hosted by WP Engine?
If you answered “yes” to both of these, speak to your IT team, your web agency, your developers, or whoever else is responsible for the upkeep and maintenance of your website, and any online donation system you use. Ask them if they have plans/protocols in place for the current situation, and make sure they are able to keep an eye on things.
Everfund will be, so keep watching here to know more.
