Trending Tech Brief #2: Etsy’s New AI Rules, a Critical PHP Fix for WordPress Sites, and ChatGPT Ads (Week of October 19, 2026)

1. Etsy’s new AI rules: what changed for sellers

On October 22, Etsy published “Important updates to AI use on Etsy” and emailed sellers. Etsy’s page blocked our reader, so this summary relies on sellers quoting the email and a detailed summary from a seller-tool company. Four changes stand out. Bot-generated listings “without any human involvement” are banned. Patterns, recipes and instructions must be the seller’s own work, not AI-generated. Most physical listings need “at least one unedited photo of the actual item against a real background.” Buyers can now report “misleading AI imagery,” though Etsy says those reports won’t trigger immediate enforcement.

AI-generated art is still allowed when the seller plays a clear creative role and discloses AI use. Digital downloads should show a preview or excerpt of what buyers actually get.

What this means for you: If a tool auto-publishes listings to your shop, switch it to drafts and publish each one yourself. If you sell AI-written recipe or pattern books, those listings are now at risk. Our Etsy digital downloads guide was written before this update, so check Etsy’s policy pages for the newest wording.

2. Does your WordPress site need an update for the PHP vulnerability?

On October 21, PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote-code-execution flaws, CVE-2026-109618 and CVE-2026-109619 (PHP Foundation). WordPress.org says no WordPress update is required, because the flaw is in PHP itself, and that versions before 8.2 no longer get security fixes. You can see your PHP version under Tools > Site Health > Info > Server. OpenAI says a research partner found one of the flaws using its GPT-5.6 Sol model.

Hostinger says exploit code was circulating before the fix, and that it had installed the fix on every plan except VPS by October 22. On its managed plans, a PHP Info build date of October 21, 2026 or later means the fix is in.

What this means for you: Updating plugins won’t fix this one. On managed hosting, check your host’s status page or PHP build date. If you run your own VPS, update PHP and restart it now.

3. ChatGPT ads reach 89 countries, and a GPT-6 correction

On October 21, OpenAI expanded ChatGPT Ads to 26 more countries, 89 in total. It says more than 100,000 advertisers have run campaigns. Ads appear only on the Free and Go plans; Plus, Pro and Enterprise stay ad-free. Advertisers can sign up through partners or a self-serve Ads Manager.

Correction to Brief #1: we passed on a pricing tracker’s report that Free and Go had moved to GPT-6. OpenAI’s Help Center now says GPT-6 is rolling out to eligible Plus, Pro, Business and Enterprise users, while Free and Go get GPT-5.6 Luna, with unlimited everyday text chats.

What this means for you: If you draft on the free plan, expect ads and GPT-5.6 Luna rather than GPT-6. If you sell a product or service, ChatGPT is now another ad channel to keep an eye on. Test it with a small budget before committing.

4. Gemini adds a small-business hub with Canva and Shopify connections

Google announced a business landing page in Gemini on October 20. You can upload a brand kit, fonts or colors so Gemini keeps generating on-brand images with Nano Banana 2.1. It also turns messy spreadsheets and receipts into charts. Connected apps include Canva, Shopify, Wix, Dropbox, Adobe and Xero. Google says these are rolling out “in the coming days” to all Gemini app users.

Separately, a new Customize menu puts custom skills and more than 40 connected apps in one place for all tiers. Most connected apps are US English for now.

What this means for you: Saving your brand style once could cut repeat setup for pins, covers and social graphics. Connect only the apps you need, and review the permissions.

5. Anthropic opens a Claude Duet waitlist; the Startups cohort is full

On October 21, Anthropic opened a research preview of Claude Duet, a separate app where Claude works as a proactive agent and checks with you before acting. It’s aimed at “professionals and small business owners.” Access is by waitlist, starting with US Pro and Max subscribers. It shares your plan’s usage limits, and its background checks count toward them.

Update on Brief #1: the Claude Startups page now says the current cohort is full and new applications are closed. Applications still in review won’t move forward.

What this means for you: If you join Duet, watch your usage, since background work draws from the same limits as your chats. Don’t plan around startup credits until the next cohort opens.

6. Is TPT banning AI resources? Yes, but there’s still no written policy

Chalkbeat reported on October 15 that TPT plans to ban AI-generated resources. A TPT spokeswoman said material should be “unique, expertly crafted, and AI-free,” and that TPT is building tools to identify and remove AI-generated resources. As of October 22, TPT’s seller blog had no written AI policy. Its latest post, on October 21, covers Keyword Finder.

What this means for you: Start with your covers, thumbnails and descriptions now. Keep dated drafts that show your own work. What TPT sellers know so far.

Questions people are asking this week

“Does this mean print-on-demand sellers have to buy one of each product to photograph it?” (asked in a reply to Etsy on X). Probably not. The summary we read says print-on-demand items have a separate rule that allows authorised stock mockups. We couldn’t read Etsy’s page directly, so check the Listing Image Requirements policy in your Shop Manager before you reshoot anything.

“Do I need to update WordPress for the PHP flaw?” No. WordPress.org says no WordPress update is required or planned. The fix is a patched PHP version, which most managed hosts install for you.

“Is GPT-6 free now?” Not according to OpenAI’s Help Center. GPT-6 is rolling out to paid plans; Free and Go users get GPT-5.6 Luna.

Also noted

• OpenAI updated its Usage Policies, effective November 20. Services that offer direct access to its models, such as model routers or AI gateways, will need OpenAI’s review and approval. If you reach GPT models through a third-party router, keep an eye on it.
• VideoGen announced Model 1 on October 20, claiming finished videos up to ten minutes long, plus a $1 million credit program for selected creators. This is a press release, and only a limited partner rollout has started.

Your action list for this week

Numbers in this issue

What we’re watching next week

• Etsy’s full policy wording and whether the new AI-image reports lead to enforcement.
• TPT’s written AI policy.
• Any reports of PHP flaws being exploited on unpatched sites.
• Wider rollout of Gemini’s business hub and Claude Duet.

Related deep dives

• AI disclosure rules compared: KDP, Etsy, TPT and Gumroad
• Selling AI-assisted digital downloads on Etsy
• TPT’s AI stance: what we know so far
• How to audit WordPress AI plugins for security
• Trending Tech Brief #1

How solid is each item?

We label sources honestly: primary pages where we could read them, press reports or summaries where we couldn’t. If something changes, we’ll correct it in next week’s issue.