WordCamp Brasil 2026 takes place on October 30 and 31 in Belo Horizonte, at Universidade FUMEC. It is the official national conference of Brazil’s WordPress community, and the organizers say this edition will focus on accessibility, artificial intelligence and the future of the open web.
Below is what the official site has confirmed so far: dates, venue, tickets and the sessions most relevant to anyone who owns or manages a WordPress site. At the end we cover what to take from the event even if you are not flying to Brazil.
WordCamp Brasil 2026: dates, venue and schedule
The event runs for two days, with an informal meetup the night before:
- Thursday, Oct 29: pre-WordCamp meetup of the Belo Horizonte WordPress community (WPBH).
- Friday, Oct 30, 1 pm to 6 pm: Contributor Day, in the FACE building (4th floor).
- Saturday, Oct 31, 8 am to 6 pm: talks and networking, in the FCH building (3rd floor).
FUMEC is at Rua Cobre, 200, in the Cruzeiro neighborhood. The event site has a travel page with routes from Confins airport and the bus terminal, and suggests that out-of-town attendees arrive on Thursday and leave on Sunday. Times are local Brasília time. The official site is in Portuguese.
Friday: Contributor Day
Friday afternoon is for contributing to WordPress itself. After check-in at 1 pm, people split into working groups (the “sprints”) in five areas: Core, Translations, AI, Security and Community Marketing. New contributors get mentoring, and the day closes with each group presenting what it produced. The organizers ask attendees to bring a laptop.
For anyone who works with WordPress, it is a rare chance to see how a fix or a translation makes its way into the software that runs your site. You don’t need to be a developer: translation and community marketing are on the list.
Saturday: two stages at once
On Saturday, talks run on two parallel tracks, with 25-minute sessions and a few panels. Some time slots have strong topics on both tracks, so it pays to plan ahead. Every session page says video and slides will be available after the talk.
The sessions that matter if you run a WordPress site
The lineup has content for developers, designers and agencies. These are the sessions closest to the day-to-day of a site owner.
Security: compromises nobody notices
At 1:30 pm, André Brunelli presents “The signs nobody sees: diagnosing a compromised WordPress site.” His abstract starts from a real case he handled: a site with no visible sign of a breach, where the site address had been changed directly in the database, visitors were silently redirected to a malicious domain, code had been injected into more than 150 pages, and user-agent cloaking showed search engines and the administrator a clean version while only regular visitors were redirected. According to the abstract, no generic scanner caught it.
The talk promises a 10-point checklist you can run on your own site without paid tools or server access, plus the right containment order once a suspicion is confirmed. For a business owner, it is the most practical session on the schedule.
In the Auditório Phoenix track, a talk on the anatomy of a silent WordPress backdoor explains how a routine audit uncovered a supply chain attack that hijacked 24 legitimate plugins. Even a legitimate, well-known plugin can become a way in.
AI and WordPress
AI comes up in several sessions. The ones that caught our attention:
- Panel on the WordPress market in the age of AI in Brazil in 2027 (9:30 am): three agencies from different regions and backgrounds (Aztec Web, Studio Visual and id5) explain how they use AI day to day, moderated by Davi Abeid Pontes of Automattic for Agencies. Among the questions on the agenda: whether AI will push prices down or raise the value agencies deliver, and what role a CMS plays once generative AI builds and edits sites.
- “Agentic development with WordPress Playground” (1:30 pm, Auditório Phoenix): Fellyph Cintra shows WordPress running as a sandbox where AI agents test changes before they reach production, with MCP, WebMCP and automated checks in the CI/CD pipeline. It is a technical, developer-focused talk, and it overlaps with the security session.
- “From audience to digital authority: why WordPress is the infrastructure of the open web in the age of AI” (2 pm, Track 2): with Sérgio Maria, a former Google director for Latin America and founder of 42WP, a WordPress VIP partner.
- “Payload won’t kill WordPress” (4:30 pm): Amanda Noronha Araujo answers the pitch that sites must move to a headless CMS because AI needs structured content. She covers what WordPress already provides (custom post types, JSON-LD, REST and GraphQL), how AI crawlers such as GPTBot, OAI-SearchBot, ClaudeBot and PerplexityBot behave, the llms.txt file, and what a shopping agent needs to find in a WooCommerce catalog.
If someone has told you that “WordPress isn’t built for the AI era,” Amanda’s session is the one to watch, even if only on video afterwards.
Performance and code quality
Arielle Lucca, a WordPress performance specialist at WP Media, talks about what actually happens when you optimize a site, including projects sped up without relying on plugins. Developers also get an introduction to PHP_CodeSniffer and the WordPress Coding Standards. Career and design are covered by a panel on what a tech professional should look like in 2027 and by David Arty’s talk on which design skills will survive AI.
Times and session order can change before the event. Check each talk’s page on the official site before you plan your day.
Tickets: price and what’s included
Tickets were released in three batches. The first (R$80) and second (R$90) are sold out. The third batch costs R$100 and is on sale until October 30. When we checked the page on the morning of October 22, 66 tickets were left.
The ticket covers both days and includes Saturday lunch, coffee breaks on both days and swag. A few details from the ticket page:
- Buying requires logging in with a WordPress.org account (the account for the project’s official site, not your own website). You can create one on the spot.
- Payment may carry a small IOF tax (a Brazilian tax on financial transactions), even with Pix.
- There is a micro-sponsorship option called “Doce de Leite” for R$270, aimed at freelancers and independent professionals: it adds a ticket to donate and lists your name on the sponsors page.
What WordCamp Brasil means for WordPress site owners
The event falls in the middle of the WordPress 7.2 cycle. According to the official schedule, Beta 2 ships on October 27, Beta 3 on November 3 and the final release on December 8, 2026. Attendees will hear first-hand what is landing in core, and everyone else can follow along with our overview of what’s coming in WordPress 7.2.
Even from a distance, the schedule works as a checklist for reviewing your own site:
- André Brunelli’s talk and the session on the 24 hijacked plugins both deal with breaches that never show up in the dashboard. If organic traffic dropped for no clear reason or a customer complained about being redirected, act now instead of waiting for the video.
- The hijacked plugins case leaves a practical rule: remove plugins you don’t use, and make sure someone tracks every update on the ones you keep.
- The Payload session shows that well-structured content and control over which bots read your site depend more on configuration than on switching platforms.
If you want to know where your site stands on these points before changing anything, Amicatek offers a WordPress site assessment. And if you would rather have someone handle updates, plugins and security every month, see how our WordPress maintenance works.
Sources
- WordCamp Brasil 2026, official site
- WordCamp Brasil 2026 schedule
- WordCamp Brasil 2026 tickets
- Getting to WordCamp Brasil 2026
- Os sinais que ninguém vê: diagnóstico de WordPress comprometido
- Payload não vai matar o WordPress
- Painel: O Mercado WordPress na época de IA no Brasil em 2027
- Desenvolvimento agêntico com WordPress Playground
- Sérgio Augusto Ávila Maria, speaker page
- Auditório Phoenix track
- WordPress 7.2 release schedule (Make WordPress Core)