WordFence — a security plugin to…
WordFence — a security plugin to boot — has an XSS vulnerability that was recently patched. VaultPress posted more about it, but if you run this plugin, you need to update.
Similar Posts
WordPress 6.0.2 Security and Maintenance Release: WordPress.org’s Bug Bounty Program at Work
Ram Dall over at Wordfence has a good breakdown of three vulnerabilities patched in the WordPress 6.0.2 Security and Maintenance Release.
Tony Perez’s approach to WordPress security…
Tony Perez‘s approach to WordPress security is not about complex configurations but three key tenets. These include 1) limiting access to the server stack to known and trusted sources, 2) limiting file access and knowing what is modified and introduced, and 3) limiting potential damage by controlling what can be accessed in the event of…
Consequences of bumping PHP minimums, from a Joomla lead that’s been there
There’s a mega Trac ticket to, “strategize the updating of minimum PHP version.” Joe and I talked about this on the latest podcast too (in the last segment), if you’re curious. The Trac ticket goes every which way, as you’d expect. But this feedback from Joomla developer @mbabker is great to be able to get, considering…
An Interview with Jamie Schmid, Community Evangelist for SiteLock
What’s it like to be a product evangelist in the WordPress space? And how do you get to be one? Find out from Jamie Schmid.
In defense of WordPress
Mattias Geniar gives WordPress a pat on the back for how the project has handled recent security vulnerabilities. At PHP conferences, WordPress often serves as a punching bag. Nearly every talk that discusses code quality brings in WordPress and compares it to other frameworks. WordPress always ends up at the bottom. Yet here it is,…
Linode has finally followed up after…
Linode has finally followed up after their security brew-ha-ha that you may remember affected WP Engine not long ago. It doesn’t say a ton and follows a pretty standard follow-up / PR script, but it’s at least some closure for affected customers.
