Month: May 2017

  • Avada Theme Version 5.1.5 Patches Stored XSS and CSRF Vulnerabilities

    Avada Theme Version 5.1.5 Patches Stored XSS and CSRF Vulnerabilities

    Theme Fusion’s Avada WordPress Theme, the highest selling theme on Themeforest for the past four years, has fixed stored XSS and CSRF vulnerabilities in its 5.1.5 release. The security issues were discovered by WP Hütte, a WordPress security blog, and the site published details of the vulnerabilities after Theme Fusion patched its theme. Although the…

  • Quick Tip: How to Access Jetpack’s Alternative Module Interface

    Quick Tip: How to Access Jetpack’s Alternative Module Interface

    Late last year, Jetpack 4.3 unveiled a new admin interface written in React.js. The Jetpack team received feedback from more than 8K users before it was publicly released. While the old interface displayed all modules on one page, the new interface breaks up module management into sections. You can also access some modules by typing its name…

  • WordCamp Europe Attendees Are Being Denied Visas Because Conference Ticket Price Is Too Low

    WordCamp Europe Attendees Are Being Denied Visas Because Conference Ticket Price Is Too Low

    This morning, WordCamp Europe 2017 organizers published an open letter to Emmanuel Macron, the president of France, regarding attendees being denied visas for the event. According to the rejections attendees have received, France is denying the visas because the ticket price for the conference is too low: It has come to our attention that our…

  • WordPress.com’s TV Commercials Are Confusing

    WordPress.com’s TV Commercials Are Confusing

    In Matt Mullenweg’s 2016 State of the Word, he announced the WordPress Growth Council. The council was created as a think-tank for individuals and organizations in the WordPress community to share ideas on how best to tell WordPress’ story to grow market share. The Growth Council serves as a collaborative means to combat the more than $300M in…

  • Primary Vagrant 4.0 Updated to Use PHP 7.1, Introduces a Site Generator

    Primary Vagrant 4.0 Updated to Use PHP 7.1, Introduces a Site Generator

    In 2014, Chris Wiegman forked VVV to create Primary Vagrant, an Apache based Vagrant configuration that uses Puppet. The project has steadily evolved over the past three years and the latest release includes significant changes that require users to destroy any existing environments before upgrading. Primary Vagrant 4.0 runs on PHP 7.1 by default. It…

  • Atom Editor Adds Git and GitHub Integration

    Atom Editor Adds Git and GitHub Integration

    GitHub open sourced its JavaScript-powered Atom editor in 2014 with extensibility designed to be its single-most important feature. Over the past three years, a thriving ecosystem of more than 6,000 packages to extend the editor has grown out of Atom’s open source community. GitHub estimates Atom now has 2.1 million active users. This week Atom…

  • WPWeekly Episode 273 – Mental Health Awareness With Bridget Willard and Ed Finkler

    WPWeekly Episode 273 – Mental Health Awareness With Bridget Willard and Ed Finkler

    The month of May is Mental Health Awareness month. On this episode, Ed Finkler, founder of Open Sourcing Mental Illness (OSMI), and Bridget Willard, Marketing Manager for WordImpress, join me to raise awareness of mental health. We start the show by discussing what mental health is and what it means to feel normal. We talk…

  • WordCamp Europe Contributor Day to Host 13 Workshops, Event is Nearly Sold Out

    WordCamp Europe Contributor Day to Host 13 Workshops, Event is Nearly Sold Out

    WordCamp Europe’s Contributor Day is set for Thursday, June 15th, 2017, the day before the conference days begin. Attendees will be split into contributor teams and this year the event will also feature four talks and 13 workshops. The selected team leaders are long-time WordPress core and community contributors from around the world. Scheduled talks…

  • WordPress 4.7.5 Patches Six Security Issues, Immediate Update Recommended

    WordPress 4.7.5 Patches Six Security Issues, Immediate Update Recommended

    WordPress 4.7.5 was released today with fixes for six security issues. If you manage multiple sites, you may have seen automatic update notices landing in your inbox this evening. The security release is for all previous versions and WordPress is recommending an immediate update. Sites running versions older than 3.7 will require a manual update.…

  • What to Expect in WordPress 4.8

    What to Expect in WordPress 4.8

    WordPress 4.8 Beta 1 is available for testing and has a couple of features that will likely have a big impact. New Image, Video, and Audio Widgets WordPress 4.8 has three new core widgets and adds a visual editor to the Text widget. Adding video, audio, or images to text widgets typically involves using custom…

  • Hookr Plugin Rebrands as WP Inspect, Project to Shift to a Module-Based Architecture

    Hookr Plugin Rebrands as WP Inspect, Project to Shift to a Module-Based Architecture

    A year and a half after the initial release of the controversially-named Hookr plugin, its creator, Christopher Sanford, has rebranded the plugin as WP Inspect. The plugin provides a WordPress hook/API reference for developers and displays the actions and filters that fired as the page loaded. At launch Sanford was fairly committed to the Hookr…

  • U.S. District Court Denies Pre-Trial Motion to Dismiss GPL Infringement Case

    U.S. District Court Denies Pre-Trial Motion to Dismiss GPL Infringement Case

    The District Court for the Northern District of California has denied a motion to dismiss a complaint of breach of contract and copyright infringement claims in a case regarding the GPL. The plaintiff, Artifex Software Inc., is the creator of Ghostscript, an AGPL-licensed PDF interpreter. In 2016, the company filed a lawsuit against Hancom, a…

  • WordPress.com Experiments With Allowing Business Plan Customers to Install Third-Party Plugins and Themes

    WordPress.com Experiments With Allowing Business Plan Customers to Install Third-Party Plugins and Themes

    One of the most important things that distinguishes self-hosted WordPress from WordPress.com is the ability to install custom themes and plugins. A recent change to WordPress.com’s Business Plan removes this limitation, allowing customers to install most third-party plugins and themes. In a WordPress.com support thread created in February, a user asked how to install plugins…

  • WordPress Is Now on HackerOne, Launches Bug Bounties

    WordPress Is Now on HackerOne, Launches Bug Bounties

    WordPress now has its own official HackerOne account where security researchers can responsibly disclose vulnerabilities to the security team. The project’s page was previously listed under Automattic’s profile before HackerOne launched its free community edition for open source projects. WordPress has now transitioned to its own account, which also includes sister projects BuddyPress, bbPress, GlotPress,…

Newsletter

Subscribe Via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.