Review an intentionally vulnerable plugin
This is a really nice idea. It’s a coding challenge where you have to audit a plugin for security flaws. A chance to learn more about best practices and getting your code reviewed by core developers.
This is a really nice idea. It’s a coding challenge where you have to audit a plugin for security flaws. A chance to learn more about best practices and getting your code reviewed by core developers.
If you or your clients use Kaswara Modern WPBakery Page Builder (10k+ installations), then you might want to uninstall it when you can. Wordfence is reporting a critical zero-day vulnerability. And if you use Elementor, make sure it’s updated. A vulnerability was discovered last month, and more recently some third-party Elementor plugins received security patches too. …
A solid post by Geert that provides a correct way to include language files in your plugins as well as a great explanation as to why this approach is best.
Matt Mullenweg just completed the 2016 State of the Word, which highlights the accomplishments of the past year, and sets the direction for the year ahead for WordPress.
The BBC News has transitioned to HTTPS, as everyone should. James Donohue, a software engineer working with a team on the transition, briefly explains the problems that needed to be addressed and why security is so important to journalism: “In a climate of anxiety around fake news, it’s vital that users are able to determine that…
Matt Mullenweg took the stage once again for his annual “State of the Word” talk at WordCamp US in a packed room of over 1,500 attendees.
WordPress plugin popularity has always been pretty tough to figure out. We only had download counts or independent, third party website scrapers to tell us anything. Now, WordPress.org itself has more data that’s being tested and launched to give us real insight into the popularity of WordPress plugins.