ByDan Knauss
Posted on
WordPress 5.4.1 dropped this week. It’s a short-cycle security and maintenance release focused on seven security issues that affected WordPress 5.4 and earlier versions. If you haven’t yet updated to 5.4, all WordPress versions since 3.7 have also been updated. 🔒
With our partners, we’re bringing you new events and special programming like WP Career Summit. Some of the speakers who will be joining us at the Summit have been talking with David Bisset on The Excerpt — like Lance Robbins this week.
In reaction to as-yet-unpublicized details about the abuse of active install data in the WordPress.org plugin repository, the charts displaying that data have been removed from plugin pages in a move expected to be temporary. Important (and some familiar) questions are emerging as this story unfolds: how to balance the values of openness, security, and privacy as well as cooperation and competition at WordPress.org — still the central hub for WordPress plugin businesses.
It’s time to update your WordPress websites now. This week’s release breaks shortcodes used in Block Themes on Templates, but is related to a security issue.
Is WordPress, and the plugin and theme ecosystem around it, ready for PHP 8? Earlier versions of PHP, such as 7.4, are now considered End of Life, and hosts are eager to deploy supported versions. But first, Core compatibility needs additional testing to come out of beta compatibility.
Translating WordPress just got a little bit easier for contributors with the WP Translation Playground.
A Community team working group announces a pilot proposal for a Contributor Mentorship Program, helping all contributors onboard.
Matt Mullenweg is the co-founder of WordPress, and founder and CEO of Automattic. In this interview, we talk about their new WordPress.com editor, and more.
This is a security nightmare: a researcher managed to breach over 35 major companies’ internal systems (including Microsoft, Apple, PayPal, Shopify, and more) in a software supply chain attack. 😱 The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into many companies’ internal applications….
What’s the best approach to maintenance — in software, sailing, or anything else? Hope for the best? Stewart Brand takes a famous solo, non-stop, round-the-world sailing race as a parable about maintenance styles that will win, go beyond winning, or drive you mad.
