WP Briefing: Episode 49: Everything You Need to Know About the Community Summit!

Episode forty-nine of the WordPress Briefing explores the What, Why, and Who behind the upcoming Community Summit in National Harbor, DC, USA, August 22-23, 2023. Join Executive Director Josepha Haden Chomphosy to learn the importance of the gathering to the WordPress project. Have a question you’d like answered? You can submit them to wpbriefing@wordpress.org, either … Read more

Wordfence Intelligence CE Weekly Vulnerability Report (1-30-2023 to 2-5-2023)

In case you missed it, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme and, plugin vulnerabilities known as Wordfence Intelligence Community Edition. This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us using … Read more

WordPress 6.2 Beta 1

WordPress 6.2 Beta 1 is ready for download and testing! This version of the WordPress software is under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, you should test Beta 1 on a test server and site. You can test WordPress 6.2 Beta 1 in … Read more

High-Severity XSS Vulnerability in Metform Elementor Contact Form Builder

On January 4, 2023, independent security researcher Mohammed Chemouri reached out to the Wordfence Vulnerability Disclosure program to responsibly disclose and request a CVE ID for a vulnerability in Metform Elementor Contact Form Builder, a WordPress plugin with over 100,000 installations. The vulnerability, an unauthenticated stored cross-site scripting vulnerability, is arguably the most dangerous variant … Read more