“Never Assume Anything” – Unauthenticated Stored Cross-Site Scripting Vulnerability Exposed in 14 Email Logging Plugins

by

“Never Assume Anything” – that is the 4th Guiding Principle written in the Security section of the WordPress Common APIs Handbook for developers. When it comes to WordPress plugin security, assumptions can be dangerous. This became evident when the Wordfence Threat Intelligence team discovered an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in 14 different email … Read more

WordPress 6.3 Release Candidate 1

by

WordPress 6.3 RC1 is ready for download and testing. This version of the WordPress software is under development. Please do not install, run, or test this version on production or mission-critical websites. Instead, you should evaluate RC1 on a test server and site.  Reaching this part of the release cycle is a key milestone. While … Read more

Massive Targeted Exploit Campaign Against WooCommerce Payments Underway

by

The Wordfence Threat Intelligence team has been monitoring an ongoing exploit campaign targeting a recently disclosed vulnerability in WooCommerce Payments, a plugin installed on over 600,000 sites. Large-scale attacks against the vulnerability, assigned CVE-2023-28121, began on Thursday, July 14, 2023 and continued over the weekend, peaking at 1.3 million attacks against 157,000 sites on Saturday, … Read more

WP Briefing: Episode 60: Sneak a Peek at WordPress 6.3 with Special Guest Mike Schroder

by

Join WordPress Executive Director Josepha Haden Chomphosy and Core Tech Lead Mike Schroder as they discuss their favorite new features and enhancements coming in WordPress 6.3. Have a question you’d like answered? You can submit them to wpbriefing@wordpress.org, either written or as a voice recording. Credits Host: Josepha Haden ChomphosyGuests: Mike SchroderEditor: Dustin HartzlerLogo: Javier ArceProduction: Nicholas GarofaloSong: Fearless … Read more

Designed with WordPress

by

The Gutenberg project has aimed to revolutionize how we manage web content as much as Johannes Gutenberg did the printed word. The project’s roadmap is comprised of four unique phases: Easier Editing — Already available in WordPress, with ongoing improvements Customization — Full site editing, block patterns, block directory, block themes Collaboration — A more … Read more