ChatGPT-5 Now Connects To Gmail, Calendar, And Contacts via @sejournal, @martinibuster

OpenAI announced that it has added connectors to Gmail, Google Calendar, and Google Contacts for ChatGPT Plus users, enabling ChatGPT to use data from those apps within ChatGPT chats.

ChatGPT Connectors

A connector is a bridge between ChatGPT and an external app like Canva, Dropbox, and Gmail, enabling users to connect those apps to ChatGPT in order to work with them within the ChatGPT interface. Access to the Google apps isn’t automatic; it has to be manually enabled by users.

This access was first made available to Pro users, and now it has been rolled out to Plus subscribers.

How To Enable Google App Connectors

Step 1: Click the + button then “Connected apps” link

Click The Next “Connected Apps” Link

Choose The Gmail App To Connect

How Connectors Work With ChatGPT-5

According to OpenAI’s announcement:

“Once you enable them, ChatGPT will automatically reference them when relevant, making it faster and easier to bring information from these tools into your conversations without having to manually select them each time.

This capability is part of GPT-5 and will begin rolling out to Pro users globally this week, followed by Plus, Team, Enterprise, and Edu plans in the coming weeks. To enable, visit Settings → Connectors→ Connect on the application.”

Read OpenAI’s announcement:

Gmail, Google Calendar, and Google Contacts Connectors in ChatGPT (Plus)

Featured Image by Shutterstock/Visuals6x

Google Explains Why They Need To Control Their Ranking Signals via @sejournal, @martinibuster

Google’s Gary Illyes answered a question about why Google doesn’t use social sharing as a ranking factor, explaining that it’s about the inability to control certain kinds of external signals.

Kenichi Suzuki Interview With Gary Illyes

Kenichi Suzuki (LinkedIn profile), of Faber Company (LinkedIn profile), is a respected Japanese search marketing expert who has at least 25 years of experience in digital marketing. I last saw him speak at a Pubcon session a few years back, where he shared his findings on qualities inherent to sites that Google Discover tended to show.

Suzuki published an interview with Gary Illyes, where he asked a number of questions about SEO, including this one about SEO, social media, and Google ranking factors.

Gary Illyes is an Analyst at Google (LinkedIn profile) who has a history of giving straightforward answers that dispel SEO myths and sometimes startle, like the time recently when he said that links play less of a role in ranking than most SEOs tend to believe. Gary used to be a part of the web publishing community before working at Google, and he was even a member of the WebmasterWorld forums under the nickname Methode. So I think Gary knows what it’s like to be a part of the SEO community and how important good information is, and that’s reflected in the quality of answers he provides.

Are Social Media Shares Or Views Google Ranking Factors?

The question about social media and ranking factors was asked by Rio Ichikawa (LinkedIn profile), also of Faber Company. She asked Gary whether social media views and shares were ranking signals.

Gary’s answer was straightforward and with zero ambiguity. He said no. The interesting part of his answer was the explanation of why Google doesn’t use them and will never use them as a ranking factor.

Ichikawa asked the following question:

“All right then. The next question. So this is about the SEO and social media. Is the number of the views and shares on social media …used as one of the ranking signals for SEO or in general?”

Gary answered:

“For this we have basically a very old, very canned response and something that we learned or it’s based on something that we learned over the years, or particularly one incident around 2014.

The answer is no. And for the future is also likely no.

And that’s because we need to be able to control our own signals. And if we are looking at external signals, so for example, a social network’s signals, that’s not in our control.

So basically if someone on that social network decides to inflate the number, we don’t know if that inflation was legit or not, and we have no way knowing that.”

Easily Gamed Signals Are Unreliable For SEO

External signals that Google can’t control but can be influenced by an SEO are untrustworthy. Googlers have expressed similar opinions about other things that are easily manipulated and therefore unreliable as ranking signals.

Some SEOs might say, “If that’s true, then what about structured data? Those are under the control of SEOs, but Google uses them.”

Yes, Google uses structured data, but not as a ranking factor; they just make websites eligible for rich results. Additionally, stuffing structured data with content that’s not visible on the web page is a violation of Google’s guidelines and can lead to a manual action.

A recent example is the LLMs.txt protocol proposal, which is essentially dead in the water precisely because it is unreliable, in addition to being superfluous. Google’s John Mueller has said that the LLMs.txt protocol is unreliable because it could easily be misused to show highly optimized content for ranking purposes, and that it is analogous to the keywords meta tag, which was used by SEOs for every keyword they wanted their web pages to rank for.

Mueller said:

“To me, it’s comparable to the keywords meta tag – this is what a site-owner claims their site is about … (Is the site really like that? well, you can check it. At that point, why not just check the site directly?)”

The content within an LLMs.txt and associated files are completely in control of SEOs and web publishers, which makes them unreliable.

Another example is the author byline. Many SEOs promoted author bylines as a way to show “authority” and influence Google’s understanding of Expertise, Experience, Authoritativeness, and Trustworthiness. Some SEOs, predictably, invented fake LinkedIn profiles to link from their fake author bios in the belief that author bylines were a ranking signal. The irony is that the ease of abusing author bylines should have been reason enough for the average SEO to dismiss them as a ranking-related signal.

In my opinion, the key statement in Gary’s answer is this:

“…we need to be able to control our own signals.”

I think that the SEO community, moving forward, really needs to rethink some of the unconfirmed “ranking signals” they believe in, like brand mentions, and just move on to doing things that actually make a difference, like promoting websites and creating experiences that users love.

Watch the question and answer at about the ten minute mark:

Featured Image by Shutterstock/pathdoc

Google Gemini Adds Personalization From Past Chats via @sejournal, @MattGSouthern

Google is rolling out updates to the Gemini app that personalize responses using past conversations and add new privacy controls, including a Temporary Chat mode.

The changes start today and will expand over the coming weeks.

What’s New

Personalization From Past Chats

Gemini now references earlier chats to recall details and preferences, making responses feel like collaborating with a partner who’s already familiar with the context.

The update aligns with Google’s I/O vision for an assistant that learns and understand the user.

Screenshot from: blog.google/products/gemini/temporary-chats-privacy-controls/, August 2025.

The setting is on by default and can be turned off in SettingsPersonal contextYour past chats with Gemini.

Temporary Chats

For conversations that shouldn’t influence future responses, Google is adding Temporary Chat.

As Google describes it:

“There may be times when you want to have a quick conversation with the Gemini app without it influencing future chats.”

Temporary chats don’t appear in recent chats, aren’t used to personalize or train models, and are kept for up to 72 hours.

Screenshot from: blog.google/products/gemini/temporary-chats-privacy-controls/, August 2025.

Rollout starts today and will reach all users over the coming weeks.

Updated Privacy Controls

Google will rename the “Gemini Apps Activity” setting to “Keep Activity” in the coming weeks.

When this setting is on, a sample of future uploads, such as files and photos, may be used to help improve Google services.

If your Gemini Apps Activity setting is currently off, Keep Activity will remain off. You can also turn the setting off at any time or use Temporary Chats.

Why This Matters

Personalized responses can reduce repetitive context-setting once Gemini understands your typical topics and goals.

For teams working across clients and categories, Temporary Chats help keep sensitive brainstorming separate from your main context, avoiding cross-pollination of preferences.

Both features include controls that meet privacy requirements for client-sensitive workflows.

Availability

The personalization setting begins rolling out today on Gemini 2.5 Pro in select countries, with expansion to 2.5 Flash and more regions in the coming weeks.


Featured Image: radithyaraf/Shutterstock

OpenAI Brings GPT-4o Back For Paid ChatGPT Users via @sejournal, @MattGSouthern

OpenAI has restored GPT-4o to the ChatGPT model picker for paid accounts and says it will give advance notice before removing models in the future.

The company made the change after pushback over GPT-5’s rollout and confirmed it alongside new speed controls for GPT-5 that let you choose Auto, Fast, or Thinking.

What’s New

GPT-4o Returns

If you are on a paid plan, GPT-4o now appears in the model picker by default.

You can also reveal additional options in Settings by turning on Show additional models, which exposes legacy models such as o3, o4-mini, and GPT-4.1 on Plus and Team, and adds GPT-4.5 on Pro.

This addresses the concern that model choices disappeared without warning during the initial GPT-5 launch.

New GPT-5 Modes

OpenAI’s mode picker lets you trade response time for reasoning depth.

CEO Sam Altman states:

“You can now choose between ‘Auto’, ‘Fast’, and ‘Thinking’ for GPT-5. Most users will want Auto, but the additional control will be useful for some people.”

Higher Capacity Thinking Mode

For heavier tasks, GPT-5 Thinking supports up to 3,000 messages per week and a 196k-token context window.

After you hit the weekly cap, chats can continue with GPT-5 Thinking mini, and OpenAI notes limits may change over time.

This helps when you are reviewing long reports, technical documents, or many content assets in one session.

Personality Updates

OpenAI says it’s working on GPT-5’s default tone to feel “warmer than the current personality but not as annoying (to most users) as GPT-4o.”

The company acknowledges the need for more per-user personality controls.

How To Use

To access the extra models: Open ChatGPT, go to Settings, then General, and enable Show additional models.

That toggles the legacy list and Thinking mini alongside GPT-5. GPT-4o is already in the picker for paid users.

Looking Ahead

OpenAI promises more notice around model availability while giving you clearer controls over speed and depth.

In practice, try Fast for quick checks, keep Auto for routine chats, and use Thinking where accuracy and multi-step reasoning matter most.

If your workflows depended on 4o’s feel, bringing it back reduces disruption while OpenAI tunes GPT-5’s personality and customization.


Featured Image: Adha Ghazali/Shuterstock

YouTube Lets Creators Pick Exact CTAs In Promote Website Ads via @sejournal, @MattGSouthern

YouTube has updated its Promote feature, giving you more control over campaigns designed to drive website traffic.

When you set a campaign goal of “more website visits,” you can now choose a specific call to action, such as “Book now,” “Get quote,” or “Contact us.”

The change was announced during YouTube’s weekly news update for creators:

More Targeted Campaign Goals

Previously, Promote campaigns for website traffic used broader objectives. Now, you can define a more granular outcome that better matches your business goals.

For example, a consulting service might pair its campaign with a “Get quote” button, while an event organizer could use “Book now.”

By letting you choose the intended action, YouTube is making it easier to connect video promotion with measurable results.

How YouTube Promote Works

Promote is YouTube’s built-in ad creation tool, available directly in YouTube Studio.

It allows you to run ads for Shorts and videos without going through the Google Ads interface. You can create campaigns to:

  • Gain more subscribers
  • Increase video views
  • Drive visits to your website

Campaign creation and management happen entirely within YouTube Studio’s Promotions tab, keeping the process straightforward for creators who may not have experience with traditional advertising platforms.

Why This Matters

For creators promoting services, products, or events, the ability to align ads with a specific action could improve return on investment and make performance tracking easier.

Marketing teams managing YouTube channels for clients can now link spend to clear outcomes, strengthening the case for campaign value.

Looking Ahead

This update is part of YouTube’s push to give creators accessible yet more powerful monetization and promotion tools.

For marketers, it creates another measurable step in the customer journey, offering insight into how video campaigns contribute to broader marketing goals.


Featured Image: Roman Samborskyi/Shutterstock

Google: Invalid Ad Traffic From Deceptive Serving Down 40% via @sejournal, @MattGSouthern

Google cites a 40% drop in invalid ad traffic from deceptive serving, helping protect budgets and keep billing clean for advertisers.

  • Google reports a 40% reduction in invalid traffic from deceptive or disruptive serving.
  • Google now reviews content, placements, and interactions more precisely.
  • Advertisers are not charged for invalid traffic, with credits applied after detection.
Critical Vulnerability Affects Tutor LMS Pro WordPress Plugin via @sejournal, @martinibuster

An advisory was issued about a critical vulnerability in the popular Tutor LMS Pro WordPress plugin. The vulnerability, rated 8.8 on a scale of 1 to 10, allows an authenticated attacker to extract sensitive information from the WordPress database. The vulnerability affects all versions up to and including 3.7.0.

Tutor LMS Pro Vulnerability

The vulnerability results from improper handling of user-supplied data, enabling attackers to inject SQL code into a database query. The Wordfence advisory explains:

“The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the get_submitted_assignments() function in all versions up to, and including, 3.7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. “

Time-Based SQL Injection

A time-based SQL injection attack is one in which an attacker determines whether a query is valid by measuring how long the database takes to respond. An attacker could use the vulnerable order parameter to insert SQL code that delays the database’s response. By timing these delays, the attacker can deduce information stored in the database.

Why This Vulnerability Is Dangerous

While exploitation requires authenticated access, a successful exploitation of the flaw could be used to access sensitive information. Updating to the latest version, 3.7.1 or higher is recommended.

Featured Image by Shutterstock/Ollyy

Vulnerability In 3 WordPress File Plugins Affects 1.3 Million Sites via @sejournal, @martinibuster

An advisory was issued for three WordPress file management plugins that are affected by a vulnerability that allows unauthenticated attackers delete arbitrary files. The three plugins are installed in over 1.3 million websites.

Outdated Version Of elFinder

The vulnerability is caused by outdated versions of the elFinder file manager, specifically versions 2.1.64 and earlier. These versions contain a Directory Traversal vulnerability that allows attackers to manipulate file paths to reach outside the intended directory. By sending requests with sequences such as example.com/../../../../, an attacker could make the file manager access and delete arbitrary files.

Affected Plugins

Wordfence named the following three plugins as affected by this vulnerability:

1. File Manager WordPress Plugin
Installations: 1 Million

2. Advanced File Manager – Ultimate WP File Manager And Document Library Solution
Installations: 200,000+

3. File Manager Pro – Filester
Installations: 100,000+

According to the Wordfence advisory, the vulnerability can be exploited without authentication, but only if a site owner has made the file manager publicly accessible, which mitigates the possibility of exploitation. That said, two of the plugins indicated in their changelogs that an attacker needs at least a subscriber level authentication, the lowest level of website credentials.

Once exploited, the flaw allowed deletion of arbitrary files. Users of the named WordPress plugins should consider updating to the latest versions.

Featured Image by Shutterstock/Lili1992

WordPress Contact Form Entries Plugin Vulnerability Affects 70K Websites via @sejournal, @martinibuster

A vulnerability advisory was issued for a WordPress plugin that saves contact form submissions. The flaw enables unauthenticated attackers to delete files, launch a denial of service attack, or perform remote code execution. The vulnerability was given a severity rating of 9.8 on a scale of 1 to 10, indicating the seriousness of the issue.

Database for Contact Form 7, WPForms, Elementor Forms Plugin

The Database for Contact Form 7, WPForms, Elementor Forms, also apparently known as the Contact Form Entries Plugin, saves contact form entries into the WordPress database. It enables users to view contact form submissions, search them, mark them as read or unread, export them, and perform other functions. The plugin has over 70,000 installations.

The plugin is vulnerable to PHP Object Injection by an unauthenticated attacker, which means that an attacker does not need to log in to the website to launch the attack.

A PHP object is a data structure in PHP. PHP objects can be turned into a sequence of characters (serialized) in order to store them and then deserialized (turned back into an object). The flaw that gives rise to this vulnerability is that the plugin allows an unauthenticated attacker to inject an untrusted PHP object.

If the WordPress site also has the Contact Form 7 plugin installed, then it can trigger a POP chain during deserialization.

According to the Wordfence advisory:

“This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain in the Contact Form 7 plugin, which is likely to be used alongside, allows attackers to delete arbitrary files, leading to a denial of service or remote code execution when the wp-config.php file is deleted.”

All versions of the plugin up to and including 1.4.3 are vulnerable. Users are advised to update their plugin to the latest version, which as of this date is version 1.4.5.

Featured Image by Shutterstock/tavizta