WordPress 4.4.2 is out with a security and maintenance release. It should be a no-brainer update for everyone (and is probably updated on most of your sites by now, automatically). It affects all versions of WordPress and updates are out back through 3.7.
Wordfence has a created a whitepaper aimed at developers and security researchers to share how coding flaws can introduce some of the most common and significant WordPress vulnerabilities — and how to prevent them. 🔒
Brian Richards and I cover the week in WordPress news with a new short format (15 minute) podcast. The Excerpt is part of the Draft podcast, and will be balanced by long form interviews.
Kyle Neath isn’t a fan of Unicorn culture in tech-land. He would like to see more people aim to create what he qualifies as family businesses, and aim for smaller (more niche) customer bases, provide better service, build companies that are good to employees, and grow more slowly. People don’t start hacking on projects anymore, they…
WordPress 5.0.1 was released on December 13th. There were a few backwards compatibility breaks in this version, which raised a few eyebrows. 🤨 After those eyebrows rose in the Post Status main channel, Gary Pendergast commented: The timing of security releases is determined by multiple factors. Complexity and severity of the bugs to be fixed, availability…
James Farmer’s WordPress story goes all the way back to his launch of the first hosted WordPress multisite blogging platform — just a few days ahead of WordPress.com. Edublogs currently hosts millions of students’ and educators’ blogs. James talks about successes and failures, his views on Gutenberg, how he stays competitive with Squarespace, and how he thinks the WordPress business community should respond to the loss of active install growth data at WordPress.org.
Mika Epstein posted a recommendation on Make WordPress Plugins for authors who make money from plugins to utilize a service like HackerOne to help identify and fix vulnerabilities in their plugins. The WordPress tag on HackerOne — which is a free directory for rewarding “white hat” hackers who find and disclose vulnerabilities — already has…
