WordPress is licensed under the GPLv2 and the four freedoms it allows is considered to be its Bill of Rights. The four freedoms are: The freedom to run the program, for any purpose. The freedom to study how the program works, and change it so it does your computing as (more…)
Netanel Rubin, a vulnerability researcher for Check Point Software and credited for properly disclosing a security vulnerability to WordPress, published the first in a trilogy of posts that explains how he discovered it. The vulnerability was discovered during a full audit of WordPress’ code base in which Rubin praised the (more…)
WordPress 4.2.4 is available and patches six security vulnerabilities. The vulnerabilities were discovered by outside parties and members of the WordPress core security team. This release also fixes four bugs: WPDB: When checking the encoding of strings against the database, make sure we’re only relying on the return value of (more…)
If you use the sharing feature on WordPress.com, you may have noticed an anomaly between your post title and what’s shared to social services. Since the post title is the first field to complete when writing a post, it makes sense to fill it in even if it’s a work in (more…)
When WordPress 4.2.3 was released last week, not only did it patch a critical security vulnerability, but also adversely impacted a number of sites. Changes to the Shortcode API which were necessary as part of the patch caused some plugins that rely on the API to break. These changes were (more…)
WordPress 4.2.3, a critical security release, was automatically pushed out to users yesterday to fix an XSS vulnerability. Shortly afterwards, the WordPress.org support forums were flooded with reports of websites broken by the update. Roughly eight hours later Robert Chapin (@miqrogroove) published a post to the Make.WordPress.org/Core blog, detailing changes (more…)
WordPress users in the Americas woke this morning to find update notices in their inboxes due to a critical security vulnerability. WordPress 4.2.3 was released today and automatically pushed out to sites that have auto-updates enabled. Because this is a security release for all previous versions of WordPress, those who (more…)
WordPress has a whitelist of 31 trusted sites from which users can oEmbed content, but one source is noticeably missing – WordPress itself. During this week’s feature plugin chat, Pascal Birchler and a group of contributors proposed the idea of oEmbed for WordPress Posts: Basically, we want to make WordPress (more…)
WordPress 4.3 beta 3 was released this week right on schedule, and beta 4 is expected to arrive next Wednesday. This release includes more than 140 fixes and improvements since last week’s beta. One of the most important changes you’ll notice is that the Site Icon feature is now available (more…)
WordPress REST API project lead Ryan McCue, in cooperation with Automattic’s Engineering team, released a REST API Console plugin on WordPress.org today. It’s a basic console that fits right into the WordPress admin and allows you to explore the API, make small changes, and find out what your site is (more…)
WordPress.org will soon support translations and language packs for themes hosted in the official directory. In Matt Mullenweg’s Q&A at WordCamp Europe 2015, he emphasized the importance of having better language support for themes and plugins and identified this as a high priority for continued improvements to WordPress.org. Today the (more…)
Earlier this month, Tom McFarlin published a great post where he shares his perspective on the WordPress community. His post struck a nerve and instead of discussing it through comments, I invited him to a Google Hangout to have a candid conversation. Within the conversation, McFarlin and I discuss a (more…)