WordPress News

WordPress zero day vulnerability on comment text patched in 4.2.1

Brian Krogsgard

April 28, 2015

Many readers have likely heard by now that WordPress 4.2.1 is out (and probably already patched on your installs). The patch is in response to a zero day vulnerability reported by Jouko Pynnönen of Klikki. WordPress 4.2.1 includes a check on…

WordPress 4.2, “Powell”, released

Brian Krogsgard

April 23, 2015

Make WordPressPlanet

WordPress 4.2, “Powell”, has been released. The release was lead by Drew Jaynes and includes contributions from 283 community members.

Where style guides fit process

Brian Krogsgard

April 23, 2015

Design

If you've ever worked on a site that evolves over time or for one that has pre-existing brand guidelines, then you probably know a bit about style guides. Chris Coyier has kindly named some common style guide strategies, and talked…

Postmatic begins rollout of commercial version at $9 per month

Brian Krogsgard

April 23, 2015

Business

Late last year I wrote about Postmatic, a plugin that aims to improve your WordPress email and commenting experience. The plugin allows for comment management directly from your email, as well as handles post and comment subscriptions for your blog. The…

Theme Review Team to require using the Customizer for all theme options

Devin Price

April 22, 2015

PlanetWordPress News

All theme options must now be included in the Customizer for themes submitted to the WordPress theme repository. Custom theme options pages will not be allowed. The change will have implications for authors, reviewers, and users of WordPress themes.

WordPress showcase: Politico for Europe

Brian Krogsgard

April 21, 2015

Design

Politico.eu just launched. Politico is a big political news outlet here in the United States, and their push to European politics is a major initiative for them. And they're making the push using WordPress as their CMS. I was surprised…

How to decide what should be a paid add-on

Brian Krogsgard

April 21, 2015

Business

James Laws writes about what to consider when determining whether a new plugin feature should be a paid add-on or not. At NinjaForms, they balance a number of criteria, but in the end he says it comes to a gut…

WordPress security release for all versions

Brian Krogsgard

April 21, 2015

Security

All past versions of WordPress "are affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site," according to the release post by Gary Pendergast. WordPress 4.1.2, 4.2 RC3, and new tag releases on past versions…

What we learned today

Brian Krogsgard

April 21, 2015

Security

In my blog post about today's coordinated plugin update, I discussed the logistics of many of the top WordPress plugins working together to put out an update to fix the misuse of add_query_arg() and remove_query_arg(). Throughout the day, I've tracked other…

Coordinated plugin updates to address security vulnerability in many popular WordPress plugins

Brian Krogsgard

April 20, 2015

PlanetSecurity

A coordinated plugin update occurred this morning between many popular WordPress plugins to address a common security vulnerability that allows for XSS cross-site scripting attacks.

WordPress News with Daniel Espinoza

Brian Krogsgard

April 17, 2015

DraftPlanet

Daniel Espinoza and I cover the week in WordPress news with a short format (~15 minute) podcast. This week we talk about Automattic versus WordPress, the 4.2 release candidate, clever REST API uses, taxes, and hosted website solutions' marketing.

Inside Jetpack

Brian Krogsgard

April 13, 2015

Hosting

Sarah Gooding has an interesting long form piece that goes inside Jetpack's multiple team setup at Automattic, and how they think about development and the structure of the plugin. I found the bit about installs... odd. Automattic is aware of…

Hosting tips for developers

Brian Krogsgard

April 13, 2015

Hosting

Mark Jaquith shares some hosting tips for developers using Pantheon's service. I wish I'd seen this before I used Pantheon for the first time. If you're doing client work on Pantheon, Mark's guide is outstanding. Also, it's not a bad read…

GoDaddy acquires Elto to create a marketplace for WordPress professionals

Brian Krogsgard

April 10, 2015

Hosting

GoDaddy has acquired Elto to create a marketplace for WordPress professionals. Elto shut down late last year to re-think their strategy, and today it was reported by TechCrunch that they are joining GoDaddy to better execute their vision. The company's…

WordPress REST API security update, due to exposed revisions and draft posts

Brian Krogsgard

April 9, 2015

Security

From the Make WordPress Core blog: This release fixes a serious information disclosure vulnerability, which allowed for unpublished content and post revisions to be retrieved via the REST API. and This release was coordinated by the REST API team and…

WP101 and Sidekick are partnered with GoDaddy

Brian Krogsgard

April 7, 2015

Hosting

WP101 has inked a deal with GoDaddy's Pro (WordPress) hosting product to complement their deal with Sidekick, to enable a significant amount of user training for GoDaddy customers. Both deals are part of an overall agenda from GoDaddy to enable…