WordPress 4.8.2 Patches Eight Security Vulnerabilities

WordPress 4.8.2 is available for download and users are encouraged to update as soon as possible. This release patches eight security vulnerabilities and has six maintenance related fixes. Hardening was also added to WordPress core to prevent plugins and themes from accidentally causing a vulnerability through $wpdb->prepare() which can create unexpected and unsafe queries leading to potential SQL injection (SQLi). …

Display Widgets Plugin Permanently Removed from WordPress.org Due to Malicious Code

Display Widgets, a plugin with more than 200,000 active installs, has been removed from WordPress.org due to its authors inserting malicious code. SEO consultant David Law was the first to bring this issue to the attention of the plugin team after discovering that Display Widgets was inserting content into sites from external servers and also collecting visitor data without permission. …

Equifax Launches WordPress-Powered Site for Consumers Affected by Security Breach

photo credit: Lock – (license) Equifax has launched a WordPress-powered website to connect with consumers affected by its recent security breach, which compromised 143 million customers’ personal data. The exposed data includes names, birth dates, social security numbers, addresses, credit card numbers, driver’s license numbers, and other sensitive financial information. The equifaxsecurity2017.com site was launched shortly after disclosure to give …

Gutenberg 1.1.0 Adds Autocomplete for Blocks, Developers Elaborate on How New Editor Will Work with Themes

Gutenberg contributors continue marching forward this week on their relentless drive to improve the usability of the controversial new editor that will ship with WordPress 5.0. Meanwhile, discussions about Gutenberg’s timing, implications, UI, architecture, and other aspects of the project continue across the web, as the community grapples with what this new editor will mean for the future of WordPress. …

Jetpack 5.3 Adds PHP 7.1 Compatibility, Better Control for WordAds Placement

Jetpack 5.3 was released with compatibility for PHP 7.1, a task the Jetpack team has been working on since January 2017 after they received multiple reports of failures with PHP 7.1 when opcache was enabled. This interfered with XML-RPC requests and some users reported issues managing their sites from WordPress.com and connecting to third-party apps. Downgrading to PHP 7.0 or …