Jetpack 4.0.3 Patches a Critical XSS Vulnerability

Jetpack 4.0.3 is a security release that contains an important fix for a critical vulnerability that has been present in the plugin since version 2.0, released in 2012. According to Jetpack team member Sam Hotchkiss, a stored XSS vulnerability was found in the way that some Jetpack shortcodes are processed, (more…)

In Case You Missed It Featured Image

There’s a lot of great WordPress content published in the community but not all of it is featured on the Tavern. This post is an assortment of items related to WordPress that caught my eye but didn’t make it into a full post. Chris Lema Launches Beyond Good Chris Lema (more…)

BuddyPress Launches Style Modules Trial Initiative

BuddyPress core developer Hugo Ashmore announced a new trial initiative this week that aims to create a library of CSS and JavaScript snippets to help users customize their communities. The Style Modules project will aggregate community-submitted code that enhances BuddyPress components in a plug-and-play manner. Developers who want to contribute (more…)

The .blog Domain Extension Is Now Open to Registrars

Today marks a moment in internet history, as the very first .blog domain is now operational on WordPress.com. Knock Knock, WHOIS There, a subsidiary of Automattic, launched Nic.blog today to begin getting registrars to sign up to sell the new TLD. Automattic won the rights to oversee the sale and (more…)