The Core Media Widgets feature plugin introduced a gallery widget in the 0.2.0 release this week. WordPress 4.8 added the new audio, image, and video widgets from this feature plugin. The gallery widget is targeted for merge into the upcoming WordPress 4.9 release. In testing the new feature I found it to be a simple, straightforward implementation of a gallery …
WordPress 4.8.2 Patches Eight Security Vulnerabilities
WordPress 4.8.2 is available for download and users are encouraged to update as soon as possible. This release patches eight security vulnerabilities and has six maintenance related fixes. Hardening was also added to WordPress core to prevent plugins and themes from accidentally causing a vulnerability through $wpdb->prepare() which can create unexpected and unsafe queries leading to potential SQL injection (SQLi). …
Vue Project Launches Community Campaign on OpenCollective
With the recent news that WordPress is abandoning React due to its BSD + Patents license, core contributors are now revisiting the discussion of the merits of other frameworks. Gutenberg development is currently on hold until a new library is chosen to replace React, and selection is likely to be imminent to prevent further delay. Vue is once again a …
First WordCamp Dublin Set for October 14-15
photo credit: Ireland.com Following up on the success of WordCamp Belfast last October, the WordPress community in Dublin will be hosting its first WordCamp October 14-15. Both camps began the early stages of planning last year and the two communities have shared some of the same organizers across their teams to help get these new camps off the ground in …
Display Widgets Plugin Permanently Removed from WordPress.org Due to Malicious Code
Display Widgets, a plugin with more than 200,000 active installs, has been removed from WordPress.org due to its authors inserting malicious code. SEO consultant David Law was the first to bring this issue to the attention of the plugin team after discovering that Display Widgets was inserting content into sites from external servers and also collecting visitor data without permission. …
WordPress.org Adds New Support Rep Role for Plugin Pages
WordPress.org introduced a new feature for plugin pages this week that highlights official support representatives. Plugin authors can now find the UI for adding support reps under the Advanced View on the plugin page. Unlike the contributors and developers role, individual support reps do not have commit access and do not appear on the plugin details page. The new “support …
“The Final Word” Plugin Extends O2 to Pin a Highlighted Comment to the Top of a Thread
“The Final Word” is a new plugin that extends O2 to highlight a comment at the top of a thread. O2 is the plugin successor to P2, Automattic’s group blogging theme that introduced quick posting from the front page with real-time comment updates. The code was released on GitHub in 2015 and it powers the make.wordpress.org blogs. If you use …
Equifax Launches WordPress-Powered Site for Consumers Affected by Security Breach
photo credit: Lock – (license) Equifax has launched a WordPress-powered website to connect with consumers affected by its recent security breach, which compromised 143 million customers’ personal data. The exposed data includes names, birth dates, social security numbers, addresses, credit card numbers, driver’s license numbers, and other sensitive financial information. The equifaxsecurity2017.com site was launched shortly after disclosure to give …
Gutenberg 1.1.0 Adds Autocomplete for Blocks, Developers Elaborate on How New Editor Will Work with Themes
Gutenberg contributors continue marching forward this week on their relentless drive to improve the usability of the controversial new editor that will ship with WordPress 5.0. Meanwhile, discussions about Gutenberg’s timing, implications, UI, architecture, and other aspects of the project continue across the web, as the community grapples with what this new editor will mean for the future of WordPress. …
Jetpack 5.3 Adds PHP 7.1 Compatibility, Better Control for WordAds Placement
Jetpack 5.3 was released with compatibility for PHP 7.1, a task the Jetpack team has been working on since January 2017 after they received multiple reports of failures with PHP 7.1 when opcache was enabled. This interfered with XML-RPC requests and some users reported issues managing their sites from WordPress.com and connecting to third-party apps. Downgrading to PHP 7.0 or …