WordPress sent an email to Elliot Condon asking to “remove all ‘license-key features’ from the repository immediately.” The post outlines what will happen to ACF plugins over the next few weeks.
If you are using the Social Media Widget plugin (social-media-widget), make sure to remove it immediately from your website. Sucuri discovered it’s being used to inject spam into websites and it has also been removed from the WordPress Plugin repository. This is a very popular plugin with more than 900,000 downloads.
Get one of these great deals on WordPress products and services for 2019 Black Friday and Cyber Monday sales.
This is a security nightmare: a researcher managed to breach over 35 major companies’ internal systems (including Microsoft, Apple, PayPal, Shopify, and more) in a software supply chain attack. 😱 The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into many companies’ internal applications….
The official PHP Git server was attacked this past week. The attack is still under investigation, but actions were quickly taken to protect it, and there is no active security risk. To learn more, you can read Enrico Zimuel‘s explanation. Github will now be the main repository for the PHP source code.
I was very happy to read this post on WP Beginner in support of leaving dates on blog posts. It’s bugged me for years that WP Beginner (and loads of other sites) didn’t have them, because like they say in the article, it makes it hard to verify the usefulness of the post if you don’t know…
That’s why people go to websites. My colleague, David Hickox, hits the nail on the head. Sliders are the latest craze, but, “they’re just the latest in a long line of misguided client fixations aimed at producing excitement and engagement on the web.” Quite a worthwhile read.
