• New Private Slack Channel Created for Full-Time Sponsored WordPress Contributors

    New Private Slack Channel Created for Full-Time Sponsored WordPress Contributors

    As part of an experiment designed to improve coordination of contributor teams, WordPress has launched a new Slack channel for full-time sponsored contributors. Josepha Haden Chomphosy, the project’s executive director, announced the new closed Slack channel on Friday evening in a post that drew critical feedback from contributors who pushed for more clarification. “2020 was…

  • WebARX Rebrands To Patchstack, Combines Services To Focus on WordPress Plugin and Theme Security

    WebARX Rebrands To Patchstack, Combines Services To Focus on WordPress Plugin and Theme Security

    In 2018, WebARX launched the first version of its security platform and grew to 3,000 users. Earlier this month, the company decided to rebrand to Patchstack. Outside of customers getting the name wrong, the company had grown beyond its original SaaS product, providing other services like PlugBounty, an open-source bug-hunting platform. Earlier this year, they…

  • Upcoming Changes and Steps for an Overhauled WordPress Theme Review System

    Upcoming Changes and Steps for an Overhauled WordPress Theme Review System

    On Wednesday, WordPress executive director Josepha Haden Chomphosy posted the next steps forward for themes and reviews for the official theme directory. In the post, she describes the tools and types of access the Themes Team needs. She also laid out some other goals for the system. The timeline is to have much of this…

  • Elementor Patches XSS Vulnerabilities Affecting 7 Million WordPress Sites

    Elementor Patches XSS Vulnerabilities Affecting 7 Million WordPress Sites

    Elementor users who haven’t updated recently will want to get on the latest version 3.1.4 as soon as possible. Researchers at Wordfence disclosed a set of stored Cross-Site Scripting (XSS) vulnerabilities in the plugin to its authors in February, which was partially patched at that time and additional fixes were released the second week of March.…

  • Work on the Twenty Twenty-Two Default WordPress Theme Should Already Be Underway

    Work on the Twenty Twenty-Two Default WordPress Theme Should Already Be Underway

    [The Eksell theme] does such a great job of selling a block editor-driven WordPress. It was a missed opportunity to not pair something of this quality with the block editor when WordPress 5.0 was released. It’s responsive! I’m amazed this stands out as a highlight for me, but, as the official theme, Twenty Twenty-One breaks…

  • WooCommerce Live Africa to Host First Online Meetup Event, March 18, 2021

    WooCommerce Live Africa to Host First Online Meetup Event, March 18, 2021

    WooCommerce Live Africa is hosting its first online meetup on Thursday, March 18, 2021, from 5:30 PM to 7:00 PM GMT+1. The new regional group is part of the WooCommerce network of more than 100 meetups with nearly 30,000 members across 40 countries. Events will be focused on topics pertinent to store owners and entrepreneurs with a…

  • Automatically Create Image Slideshows With the Full Screen Galleries Plugin

    Automatically Create Image Slideshows With the Full Screen Galleries Plugin

    Earlier today, core WordPress contributor Nick Halsey released Full Screen Galleries, a plugin that automatically creates a full-screen slideshow when site visitors click on an image. The plugin works with all images, regardless of whether they are in a gallery block. It also supports both the classic and block editors. Lightbox-type plugins are a dime…

  • Attackers Continue to Exploit Vulnerabilities in The Plus Addons for Elementor Plugin

    Attackers Continue to Exploit Vulnerabilities in The Plus Addons for Elementor Plugin

    Last week, security researchers at Seravo and WP Charged reported a critical zero-day vulnerability in The Plus Addons for Elementor on March 8, 2021. WPScan categorized it as an authentication bypass vulnerability: The plugin is being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including…

  • Google Accuses Microsoft of “Breaking the Open Web”

    Google Accuses Microsoft of “Breaking the Open Web”

    Just before the weekend, Google published a caustic statement on Microsoft’s public support of Australia’s new law that forces Google and Facebook to pay publishers for their content. The law requires the companies to negotiate licensing agreements with publishers in order to include news articles in both search and news feeds, including snippets. Last month,…

  • Compatibility Is Not Enough: The Eksell WordPress Theme Creates Art With Blocks

    Compatibility Is Not Enough: The Eksell WordPress Theme Creates Art With Blocks

    It is easy to become jaded after reading the same old keyword-stuffed theme descriptions. After viewing the same hero-plus-three-boxes theme designs. After seeing another theme with “block editor styles” that utterly fails to deliver on its promise. As I peruse the demo of Anders Norén’s latest WordPress theme, Eksell, I am reminded that artists still…

  • Gutenberg Block Manager Plugin Enables Global Block Removal and Recategorization

    Gutenberg Block Manager Plugin Enables Global Block Removal and Recategorization

    The world of Gutenberg blocks is expanding. WordPress’ official block directory launched in June 2020 with just 60 single-block plugins. Today, it has grown to more than 480 blocks. As users incorporate more blocks into their websites, the block inserter can become a very long list to scroll when browsing. Block management capabilities were added…

  • 2nd Annual Atarim Web Agency Summit Kicks Off March 23

    2nd Annual Atarim Web Agency Summit Kicks Off March 23

    Atarim is launching its 2nd annual Web Agency Summit in a couple of weeks. The free event will run from March 23 – 26. The goal of the event is to help agencies and freelancers in the WordPress space grow sustainable businesses. Atarim is the company formerly known as WP Feedback. In February, the business…

  • Publish Text, Image, and Gallery Snippets With the Shortnotes WordPress Plugin

    Publish Text, Image, and Gallery Snippets With the Shortnotes WordPress Plugin

    Yesterday, Happy Prime owner and engineer Jeremy Felt released Shortnotes, a plugin for writing notes from the WordPress editor. The intention is for users to create short pieces of content, such as that found on Twitter, Instagram, and similar social networks. However, it does not come with a front-end posting interface, at least not in…

  • New Full Site Editing Testing Challenge: Create a Custom 404 Page

    New Full Site Editing Testing Challenge: Create a Custom 404 Page

    The Full Site Editing (FSE) Outreach program has launched its third testing call, continuing the effort to engage users in a structured testing flow focused on specific practical tasks. Previous rounds had testers building a custom homepage and exploring the distinction between editing modes (template vs page/post). The challenge in round #3 is to create…