iThemes has released new versions of iThemes Security and iThemes Security Pro to address a critical security vulnerability. Every version of both plugins is at risk, including Better WP Security 3.0. The vulnerability allowed potentially dangerous JavaScript to run when viewing 404 logs. When the 404 Detection feature is enabled, data about requests for non-existent…
By utilizing the power of graphical processing units and partnering with Netriver, Wordfence can simulate a password cracking attempt using a library that contains more than 260 million passwords. The library is made up of previous hacks on major websites and services. For example, if your password was leaked during the LinkdIn hack in 2012,…
Disk Usage Sunburst is a new plugin created by Raidboxes that enables you to visualize the disk spaced used by your WordPress site. After installing and activating the plugin, you’ll find the sunburst chart under the Tools – Disk Usage menu. A sunburst chart is generated in SVG format that displays the amount of disk…
Facebook shocked the world when it acquired WhatsApp for $19 billion dollars in February 2014. As of January 2015, the app’s user base has grown to more than 700 million active users, making it the third largest social network on the planet. Last year very few WordPress sharing plugins prioritized adding WhatsApp, despite its enormous…
WordPress users have been subject to a rash of plugin vulnerabilities over the past couple of months. Some of these vulnerabilities have been so widespread that the FBI recently warned users of attacks designed to exploit WordPress sites. Not long after WordPress published its Security White Paper, an outbreak of issues popped up, starting with…
The WP REST API development team has released a critical security update. Rachel Baker, one of the lead developers of the WP REST API plugin says, “The release fixes a serious information disclosure vulnerability, which allowed for unpublished content and post revisions to be retrieved via the REST API.” The security vulnerability affects versions 1.2.0 and earlier. The security…
The new Give WordPress plugin launched this week on WordPress.org. As far as donation plugins go, this one is making a big splash with its 0% commission charge approach. Any site using the plugin can collect 100% of the donations given, as opposed to online donation sites that generally keep a portion of funds raised.…
ThemeReview.co partners Emil Uzelac and Justin Tadlock announced over the weekend that the service is expanding to include plugin reviews. The professional theme review service launched at the beginning of January and has been growing steadily, thanks in part to strategic recommendations from Envato and StudioPress. Uzelac and Tadlock are both senior reviewers at WordPress.org,…
When a social network is filled with mystery man avatars, it can give the impression that the site is a ghost town, overrun with spam users. Sometimes members are too lazy to upload a profile photo, no matter how many friendly prompts you try to offer. Missing profile images makes for ugly directory pages and…
Twitter users have often asked the question: “What does it mean to favorite a tweet?” The act of favoriting can communicate any number of things depending on the context, such as bookmarking, agreeing, showing support, or responding to a mention. UK researchers studying the favoriting feature on Twitter discovered that users could identify more than…
If you’re a musician or a music teacher and want to show sheet music in WordPress, you might be interested in a new plugin developed by Paul Rosen called ABC Notation. ABC Notation uses ABCjs, an open source ABC music notation JavaScript library that renders sheet music. To render sheet music, simply add the string…
Mark Jaquith, one of the lead developers of WordPress, released Cache Buddy on WordPress.org over the weekend. His new plugin works alongside caching solutions, such as WP Super Cache, Batcache, and W3 Total Cache, to enable WordPress to better serve cached pages to logged-in users. Jaquith knows just about everything there is to know about…
Shortcake, a plugin that adds a UI to make shortcodes more user friendly, is now an official WordPress feature plugin. The project is led by Daniel Bachhuber, currently the interim director of engineering at Fusion, the company where Shortcake originated. Contributors include Matthew Haines-Young and the folks at Human Made. The plugin is being developed…
Lasso is a new commercial plugin developed by Nick Haskins, founder of AESOP Story Engine, that adds a front-end editor to WordPress. After activating Lasso, users are greeted with an introduction that explains an article CSS class is needed. This class is typically used to house the content within a WordPress theme. This is a…
Featured images usually serve as the main image for a post or page. However, one of the problems with featured images is that you can’t see which posts they’re assigned to unless you edit an individual post or page. Post List Featured Image, developed by Jagged Edge Media, solves this problem by adding a featured…