Advanced Custom Fields Plugin Patches Reflected XSS Vulnerability

Advanced Custom Fields (ACF) has patched a reflected XSS vulnerability that affects versions 6.1.5 and below of ACF and ACF Pro, potentially impacting more than 2+ million users. It was discovered by Patchstack researcher Rafie Muhammad in May 2, 2023, and patched by ACF developers in version 6.1.6 on May 5, 2023. Patchstack published a security bulletin and Muhammad described the …

Periodic Table of WordPress Plugins Showcases 108 Most Popular Plugins

WordPress core committer Pascal Birchler has published a Periodic Table of WordPress Plugins to celebrate the software’s upcoming 20th anniversary. The table showcases 108 of the most popular free plugins on WordPress.org. Ten years ago Birchler created a website that showed the most popular plugins in a similar table layout, ranking them by number of active installations. This chart has …

Newly Rewritten WordPress SQLite Database Integration Plugin Needs Testing

WordPress contributors are making progress on officially supporting SQLite in core, a project that would benefit less complex sites (small to medium sites and blogs) that don’t necessarily require WordPress’ standard MySQL database. In a recent update, Yoast-sponsored core contributor Ari Stathopoulos said the SQLite Database Integration feature plugin has been rewritten, with the help of Automattic-sponsored core contributor Adam …

Yoast SEO 20.5 Drops Support for PHP 5.6, 7.0, and 7.1

Yoast SEO 20.5 was released this week with several security fixes and an improved Google SERP preview. The preview shows mobile and desktop snippets with Google’s current styling so users can see exactly how their snippets will look and tweak how they optimize them for Google Search results. Another highlight of this release is that Yoast SEO has dropped compatibility …

Engagement Tips to Woo Clients and Extend the Honeymoon Phase

Having a brilliant website isn’t enough. Even if your business came with a substantial, pre-existing customer base (and let’s face it, most don’t), continuing communication is essential for retainment and growth. Running a successful business means building and maintaining a connection with your clients – existing and potential. There are, of course, many ways to reach your business prospects in …

Twitter Suspends WordPress.com’s Access to Twitter API, Breaking Jetpack Social Sharing

Twitter suspended WordPress.com’s access to the Twitter API without notice yesterday. Representatives at WordPress.com do not know why their access is currently blocked but are working to regain it. Our access to the Twitter API is currently blocked. As a result, Jetpack Social is temporarily unable to automatically share your posts directly from https://t.co/eRvNKWaolr to Twitter. We have reached out …

Block Visibility 3.0.0 Makes Pro Version Free, Adds Browser and Device Control, Visibility Presets, and More

WordPress contributor and developer Nick Diego has released version 3.0.0 of his Block Visibility plugin, which allows users to conditionally display blocks based on specific user roles, logged in/out, specific users, screen sizes, query strings, ACF fields, and more. The biggest change in this update is that Diego has decided to merge the Pro version with the free plugin so …

Equalize Digital Raises Pre-Seed Funding for Expanding Accessibility Checker Plugin Development

Equalize Digital, a WordPress accessibility products and consulting company, has received an undisclosed amount of pre-seed funding from Emilia Capital, the investment company owned by Joost de Valk and Marieke van de Rakt. The investment will be used to accelerate the growth of Equalize Digital’s Accessibility Checker plugin, a tool for auditing websites for WCAG, ADA, and Section 508 accessibility …