Joanna dunne

WordPress 5.5.2 is now available! This security and maintenance release features 14 bug fixes in addition to 10 security fixes. Because this is a security release , it is recommended that you update your sites immediately. All versions since WordPress 3.7 have also been updated. WordPress 5.5.2 is a short-cycle security and maintenance release. The next major release will be version 5.6. You can download WordPress 5.5.2 by downloading from WordPress.org, or visit your Dashboard → Updates and click Update Now. If you have sites that support automatic background updates, they’ve already started the update process. Security Updates Ten security issues affect WordPress versions 5.5.1 and earlier. If you haven’t yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues: Props to Alex Concha of the WordPress Security Team for their work in hardening deserialization requests. Props to David Binovec on a fix to disable … [Read more...] about WordPress 5.5.2 Security and Maintenance Release

Learn More

Here it is! Named “Eckstine” in honor of Billy Eckstine, this latest and greatest version of WordPress is available for download or update in your dashboard. Welcome to WordPress 5.5. In WordPress 5.5, your site gets new power in three major areas: speed, search, and security. Speed Posts and pages feel faster, thanks to lazy-loaded images. Images give your story a lot of impact, but they can sometimes make your site seem slow. In WordPress 5.5, images wait to load until they’re just about to scroll into view. The technical term is ‘lazy loading.’ On mobile, lazy loading can also keep browsers from loading files meant for other devices. That can save your readers money on data — and help preserve battery life. Search Say hello to your new sitemap. WordPress sites work well with search engines. Now, by default, WordPress 5.5 includes an XML sitemap that helps search engines discover your most important pages from the very minute you go live. So … [Read more...] about WordPress 5.5 “Eckstine”

Learn More

Here it is! Named “Adderley” in honor of Nat Adderley, the latest and greatest version of WordPress is available for download or update in your dashboard. Say hello to more and better. More ways to make your pages come alive. With easier ways to get it all done and looking better than ever—and boosts in speed you can feel. Welcome to WordPress 5.4 Every major release adds more to the block editor. More ways to make posts and pages come alive with your best images. More ways to bring your visitors in, and keep them engaged, with the richness of embedded media from the web’s top services. More ways to make your vision real, and put blocks in the perfect place—even if a particular kind of block is new to you. More efficient processes. And more speed everywhere, so as you build sections or galleries, or just type in a line of prose, you can feel how much faster your work flows. Two new blocks. And better blocks overall. Two brand-new blocks: Social … [Read more...] about WordPress 5.4 “Adderley”

Learn More

WordPress 5.2.4 is now available! This security release fixes 6 security issues. Security Updates Props to Evan Ricafort for finding an issue where stored XSS (cross-site scripting) could be added via the Customizer. Props to J.D. Grimes who found and disclosed a method of viewing unauthenticated posts. Props to Weston Ruter for finding a way to create a stored XSS to inject Javascript into style tags. Props to David Newman for highlighting a method to poison the cache of JSON GET requests via the Vary: Origin header. Props to Eugene Kolodenker who found a server-side request forgery in the way that URLs are validated. Props to Ben Bidner of the WordPress Security Team who discovered issues related to referrer validation in the admin. Thank you to all of the reporters for privately disclosing the vulnerabilities, which gave us time to fix them before WordPress sites could be attacked. For more info, browse the full list of changes on Trac or check out the … [Read more...] about WordPress 5.2.4 Security Release

Learn More

WordPress 4.7.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.7.2 and earlier are affected by six security issues: Cross-site scripting (XSS) via media file metadata.  Reported by Chris Andrè Dale , Yorick Koster , and Simon P. Briggs. Control characters can trick redirect URL validation.  Reported by Daniel Chatfield . Unintended files can be deleted by administrators using the plugin deletion functionality.  Reported by TrigInc and xuliang . Cross-site scripting (XSS) via video URL in YouTube embeds.  Reported by Marc Montpas . Cross-site scripting (XSS) via taxonomy term names.  Reported by Delta . Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources.  Reported by Sipke Mellema. Thank you to the reporters for practicing responsible disclosure . In addition to the security issues above, WordPress … [Read more...] about WordPress 4.7.3 Security and Maintenance Release

Learn More