December 25, 2017
Video: How to Display All Your WordPress Posts on One Page
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=Kxq2X_EflV0
December 19, 2017
Video: How to Deactivate All Plugins When Not Able to Access WP Admin
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=fBk3uGpmblc
December 18, 2017
Video: How to Install WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=Jzxj4oLbylY
December 11, 2017
Video: How to Easily Add Custom CSS to Your WordPress Site
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=f0_6aeZEV58
December 4, 2017
Video: How to Add a Background Image in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=4YpyiJ05YOg
November 29, 2017
WordPress 4.9.1 Security and Maintenance Release
WordPress 4.9.1 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately.
WordPress versions 4.9 and earlier are affected by four security issues which could potentially be exploited as part of a multi-vector attack. As part of the core team's ongoing commitment to security hardening, the following fixes have been implemented in 4.9.1:
- Use a properly generated hash for the
newbloguser
key instead of a determinate substring. - Add escaping to the language attributes used on
html
elements. - Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds.
- Remove the ability to upload JavaScript files for users who do not have the
unfiltered_html
capability.
Thank you to the reporters of these issues for practicing responsible security disclosure: Rahul Pratap Singh and John Blackbourn.
Eleven other bugs were fixed in WordPress 4.9.1. Particularly of note were:
- Issues relating to the caching of theme template files.
- A MediaElement JavaScript error preventing users of certain languages from being able to upload media files.
- The inability to edit theme and plugin files on Windows based servers.
This post has more information about all of the issues fixed in 4.9.1 if you'd like to learn more.
Download WordPress 4.9.1 or venture over to Dashboard → Updates and click "Update Now." Sites that support automatic background updates are already beginning to update automatically.
Thank you to everyone who contributed to WordPress 4.9.1:
Alain Schlesser, Andrea Fercia, Angelika Reisiger, Blobfolio, bobbingwide, Chetan Prajapati, Dion Hulse, Dominik Schilling (ocean90), edo888, Erich Munz, Felix Arntz, Florian TIAR, Gary Pendergast, Igor Benic, Jeff Farthing, Jeffrey Paul, jeremyescott, Joe McGill, John Blackbourn, johnpgreen, Kelly Dwan, lenasterg, Marius L. J., Mel Choyce, Mário Valney, natacado, odyssey, precies, Saša, Sergey Biryukov, and Weston Ruter.
WordPress 4.9.1 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
November 27, 2017
Video: How to Add Featured Images or Post Thumbnails in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=9admKGpM3A0
November 20, 2017
Video: How to use FTP to upload files to WordPress for Beginners
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=x3zNBt_sHJU
November 15, 2017
November 13, 2017
WordPress 4.9 Release Candidate 3
The third release candidate for WordPress 4.9 is now available.
A release candidate (RC) means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. In fact, we did miss some things in RC1 and RC2. This third release candidate was not originally scheduled, but due a number of defects uncovered through your testing of RC2 (thank you!), we are putting out another 4.9 release candidate.
We hope to ship WordPress 4.9 on Tuesday, November 14 (that’s tomorrow) at 23:00 UTC, but we still need your help to get there. If you haven’t tested 4.9 yet, now is the time! If there are additional defects uncovered through testing between now and the release time, we may delay the 4.9 release to the following day.
To test WordPress 4.9, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).
We’ve made just over 20 changes since releasing RC2 last week (as we did between RC1 and RC2). For more details about what’s new in version 4.9, check out the Beta 1, Beta 2, Beta 3, Beta 4, RC1, and RC2 blog posts. A few specific areas to test in RC3:
- Switching between the Visual and Text tabs of the editor, and the syncing of the cursor between those two tabs.
- Overriding linting errors in the Customizer’s Additional CSS editor.
- Adding nav menu items for Custom Links in the Customizer.
- Scheduling customization drafts (stubbed posts/pages) for publishing in the Customizer.
- Autosave revisions for changes in the Customizer.
- About page styling.
Developers, please test your plugins and themes against WordPress 4.9 and update your plugin’s Tested up to version in the readme to 4.9. If you find compatibility problems please be sure to post to the support forums so we can figure those out before the final release — we work hard to avoid breaking things. Please see the summative field guide to the 4.9 developer notes on the core development blog.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
Didn’t squash them all
We want to release Tuesday
New features not bugs
Thanks for your continued help testing out the latest versions of WordPress.
WordPress 4.9 Release Candidate 3 was originally posted at https://wordpress.org/news/2017/11/wordpress-4-9-release-candidate-3/
Video: How to Create a Custom WordPress Widget
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=W1bRwUe4AeE
November 6, 2017
WordPress 4.9 Release Candidate 2
The second release candidate for WordPress 4.9 is now available.
A release candidate (RC) means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. We hope to ship WordPress 4.9 on Tuesday, November 14 (just over one week from now), but we need your help to get there. If you haven’t tested 4.9 yet, now is the time!
To test WordPress 4.9, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).
We’ve made just over 20 changes since releasing RC 1 last week. For more details about what’s new in version 4.9, check out the Beta 1, Beta 2, Beta 3, Beta 4, and RC1 blog posts. Specific areas to test in RC2:
- Theme installation in the Customizer.
- Scheduling changes for publishing in the Customizer.
- Switching themes with live preview in the Customizer.
Developers, please test your plugins and themes against WordPress 4.9 and update your plugin’s Tested up to version in the readme to 4.9. If you find compatibility problems please be sure to post to the support forums so we can figure those out before the final release — we work hard to avoid breaking things. Please see the summative field guide to the 4.9 developer notes on the core development blog.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
This week’s haiku is courtesy of @melchoyce:
We squashed all the bugs
But uh, if not, let us know
Also, test your stuff
Thanks for your continued help testing out the latest versions of WordPress.
WordPress 4.9 Release Candidate 2 was originally posted at https://wordpress.org/news/2017/11/wordpress-4-9-release-candidate-2/
Video: How to Increase the Maximum File Upload Size in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=eZgOQYXdLCk
October 31, 2017
WordPress 4.8.3 Security Release
WordPress 4.8.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.
WordPress versions 4.8.2 and earlier are affected by an issue where $wpdb->prepare()
can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Anthony Ferrara.
This release includes a change in behaviour for the esc_sql()
function. Most developers will not be affected by this change, you can read more details in the developer note.
Thank you to the reporter of this issue for practicing responsible disclosure.
Download WordPress 4.8.3 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.8.3.
WordPress 4.8.3 Security Release was originally posted at https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/
October 30, 2017
Video: How to Manually Update WordPress Plugins via FTP
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=JwgzKAQPRBo
October 25, 2017
WordPress 4.9 Beta 4
WordPress 4.9 Beta 4 is now available!
This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).
For more information on what’s new in 4.9, check out the Beta 1 blog post. Since the Beta 1 release, we’ve made 70 changes in Beta 2, and 92 changes in Beta 3. In Beta 4, we’ve made 80 changes, focusing on bug fixes and finalizing new features.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
Beta 4 at last,
RC 1 draws ever near.
Let’s make it bug-free.
WordPress 4.9 Beta 4 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-4/
October 23, 2017
Video: Beginners Guide How to Install a WordPress Theme
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=DXebqII9WEI
October 19, 2017
WordPress 4.9 Beta 3
WordPress 4.9 Beta 3 is now available!
This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).
For more information on what’s new in 4.9, check out the Beta 1 blog post. Since the Beta 1 release, we’ve made 70 changes in Beta 2 and 92 changes in Beta 3. A few of these newest changes to take note of in particular:
- The plugin/theme editors now show files in a scrollable expandable tree list. See #24048.
- Backwards compatibility has been improved for MediaElement.js, which is upgraded from 2.2 to 4.2. See #42189.
- When you create post stubs in the Customizer (such as for nav menu items, for the homepage or the posts page), if you then schedule your customized changes or save them as a draft, then these Customizer-created posts will appear in the admin as “Customization Drafts”; these drafts can be edited before your customized changes are published, at which time these posts (or pages) will also be automatically published. See #42220.
- Theme browsing and installation experience in the Customizer has seen some bugfixes (e.g. #42215 and #42212), with some known remaining issues outstanding in Safari.
- There is now a callout on the dashboard to install and activate Gutenberg. See #41316.
- Menus in the Customizer have seen additional usability improvements. See #36279 and #42114.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
Many refinements
Exist within this release;
Can you find them all?
WordPress 4.9 Beta 3 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-3/
October 16, 2017
Video: How to Fix the Error Establishing a Database Connection in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=uLS7WFa-9sw
October 12, 2017
WordPress 4.9 Beta 2
WordPress 4.9 Beta 2 is now available!
This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).
For more information on what’s new in 4.9, check out the Beta 1 blog post. Since then, we’ve made 70 changes in Beta 2.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
Let’s test all of these:
code editing, theme switches,
widgets, scheduling.
WordPress 4.9 Beta 2 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-2/
October 9, 2017
Video: How to Fix WordPress Login Page Refreshing and Redirecting Issue
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=rVkX_AdHTfU
October 5, 2017
WordPress 4.9 Beta 1
WordPress 4.9 Beta 1 is now available!
This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).
WordPress 4.9 is slated for release on November 14, but we need your help to get there. We’ve been working on making it even easier to customize your site. Here are some of the bigger items to test and help us find as many bugs as possible in the coming weeks:
- Drafting (#39896) and scheduling (#28721) of changes in the Customizer. Once you save or schedule a changeset, when any user comes into the Customizer the pending changes will be autoloaded. A button is provided to discard changes to restore the Customizer to the last published state. (This is a new “linear” mode for changesets, as opposed to “branching” mode which can be enabled by filter so that every time user opens the Customizer a new blank changeset will be started.)
- Addition of a frontend preview link to the Customizer to allow changes to be browsed on the frontend, even without a user being logged in (#39896).
- Addition of autosave revisions in the Customizer (#39275).
- A brand new theme browsing experience in the Customizer (#37661).
- Gallery widget (#41914), following the media and image widgets introduced in 4.8.
- Support for shortcodes in Text widgets (#10457).
- Support for adding media to Text widgets (#40854).
- Support for adding oEmbeds outside post content, including Text widgets (#34115).
- Support for videos from providers other than YouTube and Vimeo in the Video widget (#42039)
- Improve the flow for creating new menus in the Customizer (#40104).
- Educated guess mapping of nav menus and widgets when switching themes (#39692).
- Plugins: Introduce singular capabilities for activating and deactivating individual plugins (#38652).
- Sandbox PHP file edits in both plugins and themes, without auto-deactivation when an error occurs; a PHP edit that introduces a fatal error is rolled back with an opportunity then for the user to fix the error and attempt to re-save. (#21622).
- Addition of dirty state for widgets on the admin screen, indicating when a widget has been successfully saved and showing an “Are you sure?” dialog when attempting to leave without saving changes. (#23120, #41610)
As always, there have been exciting changes for developers to explore as well, such as:
- CodeMirror editor added to theme/plugin editor, Custom CSS in Customizer, and Custom HTML widgets. Integration includes support for linters to catch errors before you attempt to save. Includes new APIs for plugins to instantiate editors. (#12423)
- Introduction of an extensible code editor control for adding instances of CodeMirror to the Customizer. (#41897)
- Addition of global notifications area (#35210), panel and section notifications (#38794), and a notification overlay that takes over the entire screen in the Customizer (#37727).
- A date/time control in the Customizer (#42022).
- Improve usability of Customize JS API (#42083, #37964, #36167).
- Introduction of control templates for base controls (#30738).
- Use WP_Term_Query when transforming tax queries (#37038).
- Database: Add support for MySQL servers connecting to IPv6 hosts (#41722).
- Emoji: Bring Twemoji compatibility to PHP (#35293). Test for any weirdness with emoji in RSS feeds or emails.
- I18N: Introduce the Plural_Forms class (#41562).
- Media: Upgrade MediaElement.js to 4.2.5-74e01a40 (#39686).
- Media: Use max-width for default captions (#33981). We will want to make sure this doesn’t cause unexpected visual regressions in existing themes, default themes were all fine in testing.
- Media: Reduce duplicated custom header crops in the Customizer (#21819).
- Media: Store video creation date in meta (#35218). Please help test different kinds of videos.
- Multisite: Introduce get_site_by() (#40180).
- Multisite: Improve get_blog_details() by using get_site_by() (#40228).
- Multisite: Improve initializing available roles when switch sites (#38645).
- Multisite: Initialize a user’s roles correctly when setting them up for a different site (#36961).
- REST API: Support registering complex data structures for settings and meta
- REST API: Support for objects in schema validation and sanitization (#38583)
- Role/Capability: Introduce capabilities dedicated to installing and updating language files (#39677).
- Remove SWFUpload (#41752).
- Users: Require a confirmation link in an email to be clicked when a user attempts to change their email address (#16470).
- Core and the unit test suite is fully compatible with the upcoming release of PHP 7.2
If you want a more in-depth view of what major changes have made it into 4.9, check out posts tagged with 4.9 on the main development blog, or look at a list of everything that’s changed. There will be more developer notes to come, so keep an eye out for those as well.
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
Happy testing!
Without your testing,
we might hurt the internet.
Please help us find bugs.
WordPress 4.9 Beta 1 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-1/
October 2, 2017
Video: How to Add Keywords and Meta Descriptions in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=TU196u0lsrk
September 25, 2017
Video: How to Create a Custom Page in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1ZdHI8HuboA
September 19, 2017
WordPress 4.8.2 Security and Maintenance Release
WordPress 4.8.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.
WordPress versions 4.8.1 and earlier are affected by these security issues:
$wpdb->prepare()
can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Slavco- A cross-site scripting (XSS) vulnerability was discovered in the oEmbed discovery. Reported by xknown of the WordPress Security Team.
- A cross-site scripting (XSS) vulnerability was discovered in the visual editor. Reported by Rodolfo Assis (@brutelogic) of Sucuri Security.
- A path traversal vulnerability was discovered in the file unzipping code. Reported by Alex Chapman (noxrnet).
- A cross-site scripting (XSS) vulnerability was discovered in the plugin editor. Reported by 陈瑞琦 (Chen Ruiqi).
- An open redirect was discovered on the user and term edit screens. Reported by Yasin Soliman (ysx).
- A path traversal vulnerability was discovered in the customizer. Reported by Weston Ruter of the WordPress Security Team.
- A cross-site scripting (XSS) vulnerability was discovered in template names. Reported by Luka (sikic).
- A cross-site scripting (XSS) vulnerability was discovered in the link modal. Reported by Anas Roubi (qasuar).
Thank you to the reporters of these issues for practicing responsible disclosure.
In addition to the security issues above, WordPress 4.8.2 contains 6 maintenance fixes to the 4.8 release series. For more information, see the release notes or consult the list of changes.
Download WordPress 4.8.2 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.8.2.
Thanks to everyone who contributed to 4.8.2.
WordPress 4.8.2 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
September 18, 2017
Video: How to Limit the Number of Archive Months Displayed in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=ASnDBoW408U
September 11, 2017
Video: What Is the Link to Logout of WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=kYqHcNDY9kg
September 4, 2017
Video: How to Create a Facebook Like Box Popup in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=K-NiRco8-m4
August 28, 2017
Video: How to Display Recent Posts From A Specific Category In WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=roJPffQQwUc
August 21, 2017
Video: How to Display the Last Updated Date of Your Posts in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=VWT2FbJ_GZs
August 14, 2017
Video: How to Reset Passwords for All Users in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1oPXpUlrvlg
August 7, 2017
Video: How to Fix WordPress Posts Returning 404 Error
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=QhGF_KphEPk
August 2, 2017
WordPress 4.8.1 Maintenance Release
After over 13 million downloads of WordPress 4.8, we are pleased to announce the immediate availability of WordPress 4.8.1, a maintenance release.
This release contains 29 maintenance fixes and enhancements, chief among them are fixes to the rich Text widget and the introduction of the Custom HTML widget. For a full list of changes, consult the release notes, the tickets closed, and the list of changes.
Download WordPress 4.8.1 or visit Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.8.1.
Thanks to everyone who contributed to 4.8.1:
Adam Silverstein, Andrea Fercia, Andrew Ozz, Atanas Angelov, bonger, Boone Gorges, Boro Sitnikovski, David Herrera, James Nylen, Jeffrey Paul, Jennifer M. Dodd, K. Adam White, Konstantin Obenland, Mel Choyce, r-a-y, Reuben Gunday, Rinku Y, Said El Bakkali, Sergey Biryukov, Siddharth Thevaril, Timmy Crawford, and Weston Ruter.
WordPress 4.8.1 Maintenance Release was originally posted at https://wordpress.org/news/2017/08/wordpress-4-8-1-maintenance-release/
July 31, 2017
Video: How to Fix the Syntax Error in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1k02kSS6U7M
July 24, 2017
Video: How to Install and Setup WordPress SEO Plugin by Yoast
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=4KOc-oM7Yr8
July 17, 2017
Video: How to Display Most Popular Tags in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=iAS2Xe9l_Xw
July 10, 2017
Video: How to Display Different Sidebar for Each Post or Page in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1PdTWpALaX8
July 3, 2017
Video: How to Add Instant Search in WordPress with Algolia
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=b8NkZOtiTkM
June 26, 2017
Video: How to Create a Filterable Portfolio in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=b8_1RmRwtf0
June 19, 2017
Video: How to Display Facebook Events on Your WordPress Site
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=tDcJNAUMgvo
June 12, 2017
Video: How to Display Author’s Twitter and Facebook on the Profile Page
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=Kv2U41UfgiE
June 8, 2017
June 5, 2017
Video: How to Remove the Sidebar in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=mO-QIZYFNPo
June 1, 2017
WordPress 4.8 Release Candidate 2
The second release candidate for WordPress 4.8 is now available.
To test WordPress 4.8, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).
We’ve made a handful of changes since releasing RC 1 last week. For more details about what’s new in version 4.8, check out the Beta 1, Beta 2, and RC1 blog posts.
Think you’ve found a bug? Please post to the Alpha/Beta support forum. If any known issues come up, you’ll be able to find them here.
Happy testing!
WordPress 4.8 Release Candidate 2 was originally posted at https://wordpress.org/news/2017/06/wordpress-4-8-release-candidate-2/
May 29, 2017
Video: How to Add an Author Photo in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=wZCRjhphOe4
May 25, 2017
WordPress 4.8 Release Candidate
The release candidate for WordPress 4.8 is now available.
RC means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. We hope to ship WordPress 4.8 on Thursday, June 8, but we need your help to get there. If you haven’t tested 4.8 yet, now is the time!
To test WordPress 4.8, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).
We’ve made a handful of changes since releasing Beta 2 earlier this week. For more details about what’s new in version 4.8, check out the Beta 1 and Beta 2 blog posts.
Think you’ve found a bug? Please post to the Alpha/Beta support forum. If any known issues come up, you’ll be able to find them here.
Developers, please test your plugins and themes against WordPress 4.8 and update your plugin’s Tested up to version in the readme to 4.8. If you find compatibility problems please be sure to post to the support forums so we can figure those out before the final release – we work hard to avoid breaking things. An in-depth field guide to developer-focused changes is coming soon on the core development blog.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
This release’s haiku is courtesy of @matveb:
Érrese uno
Cien veces y más
Erre ce dos
Thanks for your continued help testing out the latest versions of WordPress.
WordPress 4.8 Release Candidate was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-release-candidate/
May 22, 2017
WordPress 4.8 Beta 2
WordPress 4.8 Beta 2 is now available!
This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.8, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).
For more information on what’s new in 4.8, check out the Beta 1 blog post. Since then, we’ve made over 50 changes in Beta 2.
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.
WordPress four point eight
One step closer to release
Please test Beta 2!
WordPress 4.8 Beta 2 was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-beta-2/
Video: How to Create a Donate Form for Nonprofit Organization using WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=NaZrqVv6Xhg
May 16, 2017
WordPress 4.7.5 Security and Maintenance Release
WordPress 4.7.5 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.
WordPress versions 4.7.4 and earlier are affected by six security issues:
- Insufficient redirect validation in the HTTP class. Reported by Ronni Skansing.
- Improper handling of post meta data values in the XML-RPC API. Reported by Sam Thomas.
- Lack of capability checks for post meta data in the XML-RPC API. Reported by Ben Bidner of the WordPress Security Team.
- A Cross Site Request Forgery (CRSF) vulnerability was discovered in the filesystem credentials dialog. Reported by Yorick Koster.
- A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files. Reported by Ronni Skansing.
- A cross-site scripting (XSS) vulnerability was discovered related to the Customizer. Reported by Weston Ruter of the WordPress Security Team.
Thank you to the reporters of these issues for practicing responsible disclosure.
In addition to the security issues above, WordPress 4.7.5 contains 3 maintenance fixes to the 4.7 release series. For more information, see the release notes or consult the list of changes.
Download WordPress 4.7.5 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.5.
Thanks to everyone who contributed to 4.7.5.
WordPress 4.7.5 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/05/wordpress-4-7-5/
May 15, 2017
Video: How to Optimize Your WordPress Database with One Click
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=UqNwWtbejUA
May 12, 2017
WordPress 4.8 Beta 1
We’re planning a smaller WP release early next month, bringing in three major enhancements:
- An improved visual editor experience, with a new TinyMCE that allows you navigate more intuitively in and out of inline elements like links. (Try it out to see, it’s hard to describe.)
- A revamp of the dashboard news widget to bring in nearby and upcoming events including meetups and WordCamps.
- Several new media widgets covering images, audio, and video, and an enhancement to the text widget to support visual editing.
The first beta of 4.8 is now available for testing. You can use the beta tester plugin (or just run trunk) to try the latest and greatest, and each of these areas could use a ton of testing. Our goals are to make editing posts with links more intuitive, make widgets easier for new users and more convenient for existing ones, and get many more people aware of and attending our community events.
Four point eight is here
Small changes with a big punch
Big ones come later
WordPress 4.8 Beta 1 was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-beta-1/
May 8, 2017
Video: How to Install Google Analytics in WordPress for Beginners
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=kMpcxyqXXDE
May 1, 2017
Video: How to Let Users Filter Posts and Pages in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=95-i233X7ss
April 24, 2017
Video: How to Create a Multi Page Form in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=8cJagUugS8M
April 20, 2017
WordPress 4.7.4 Maintenance Release
After almost sixty million downloads of WordPress 4.7, we are pleased to announce the immediate availability of WordPress 4.7.4, a maintenance release.
This release contains 47 maintenance fixes and enhancements, chief among them an incompatibility between the upcoming Chrome version and the visual editor, inconsistencies in media handling, and further improvements to the REST API. For a full list of changes, consult the release notes and the list of changes.
Download WordPress 4.7.4 or visit Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.4.
Thanks to everyone who contributed to 4.7.4:
Aaron Jorbin, Adam Silverstein, Andrea Fercia, Andrew Ozz, aussieguy123, Blobfolio, boldwater, Boone Gorges, Boro Sitnikovski, chesio, Curdin Krummenacher, Daniel Bachhuber, Darren Ethier (nerrad), David A. Kennedy, davidbenton, David Herrera, Dion Hulse, Dominik Schilling (ocean90), eclev91, Ella Van Dorpe, Gustave F. Gerhardt, ig_communitysites, James Nylen, Joe Dolson, John Blackbourn, karinedo, lukasbesch, maguiar, MatheusGimenez, Matthew Boynes, Matt Wiebe, Mayur Keshwani, Mel Choyce, Nick Halsey, Pascal Birchler, Peter Wilson, Piotr Delawski, Pratik Shrestha, programmin, Rachel Baker, sagarkbhatt, Sagar Prajapati, sboisvert, Scott Taylor, Sergey Biryukov, Stephen Edgar, Sybre Waaijer, Timmy Crawford, vortfu, and Weston Ruter.
WordPress 4.7.4 Maintenance Release was originally posted at https://wordpress.org/news/2017/04/wordpress-4-7-4/
April 17, 2017
Video: How to Add Random Header Images to Your WordPress Blog
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=s_XGM_F9gNk
April 10, 2017
Video: How to Create a Custom User Registration Form in WordPress
WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=A4oRUJL08xg
April 3, 2017
Video: How to Add Autocomplete for Address Fields in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=r4zeGIMrzzE
March 27, 2017
Video: How to Add Google Slides Presentations to WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=D3btJqev8D8
March 20, 2017
Video: How to Hide a WordPress Page From Google
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=wQSqK9erOw0
March 13, 2017
Video: How to Remove Visual Editor Mode in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=qT-4AzXVuP4
March 10, 2017
WordPress Releases Critical Security Update for Versions 4.7.2 and Earlier
The WordPress March 2017 critical security update (4.7.3) fixes scripting vulnerabilities and five other security issues as well as 39 maintenance fixes.
Originally posted at The WP Guy - WordPress Web Design
March 6, 2017
WordPress 4.7.3 Security and Maintenance Release
WordPress 4.7.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.
WordPress versions 4.7.2 and earlier are affected by six security issues:
- Cross-site scripting (XSS) via media file metadata. Reported by Chris Andrè Dale, Yorick Koster, and Simon P. Briggs.
- Control characters can trick redirect URL validation. Reported by Daniel Chatfield.
- Unintended files can be deleted by administrators using the plugin deletion functionality. Reported by xuliang.
- Cross-site scripting (XSS) via video URL in YouTube embeds. Reported by Marc Montpas.
- Cross-site scripting (XSS) via taxonomy term names. Reported by Delta.
- Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources. Reported by Sipke Mellema.
Thank you to the reporters for practicing responsible disclosure.
In addition to the security issues above, WordPress 4.7.3 contains 39 maintenance fixes to the 4.7 release series. For more information, see the release notes or consult the list of changes.
Download WordPress 4.7.3 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.3.
Thanks to everyone who contributed to 4.7.3: Aaron D. Campbell, Adam Silverstein, Alex Concha, Andrea Fercia, Andrew Ozz, asalce, blobfolio, bonger, Boone Gorges, Boro Sitnikovski, Brady Vercher, Brandon Lavigne, Bunty, ccprog, chetansatasiya, David A. Kennedy, David Herrera, Dhanendran, Dion Hulse, Dominik Schilling (ocean90), Drivingralle, Ella Van Dorpe, Gary Pendergast, Ian Dunn, Ipstenu (Mika Epstein), James Nylen, jazbek, Jeremy Felt, Jeremy Pry, Joe Hoyle, Joe McGill, John Blackbourn, John James Jacoby, Jonathan Desrosiers, Kelly Dwan, Marko Heijnen, MatheusGimenez, Mike Nelson, Mike Schroder, Muhammet Arslan, Nick Halsey, Pascal Birchler, Paul Bearne, pavelevap, Peter Wilson, Rachel Baker, reldev, Robert O’Rourke, Ryan Welcher, Sanket Parmar, Sean Hayes, Sergey Biryukov, Stephen Edgar, triplejumper12, Weston Ruter, and wpfo.
WordPress 4.7.3 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
Video: How to Avoid Accidental Publishing in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=xxYi6LQ_OdE
February 27, 2017
Video: How to Start an Online Store in 2017
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=Rhk95JrpGhc
February 20, 2017
Video: How to Add Signature Ads After Post Content in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=zqvql0prxPI
February 13, 2017
Video: How to Add Social Media Icons in Your WordPress Sidebar
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=9c3duWOx_34
February 8, 2017
Video: How to Properly Move from Weebly to WordPress (Step by Step)
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=cuVEc2W83IQ
February 7, 2017
Video: How to Prevent Duplicate Post Titles in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=kLqR8jYc9Ok
January 30, 2017
Video: How to Add Title Attribute in WordPress Navigation Menus
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=2OE5l0WgAbE
January 26, 2017
WordPress 4.7.2 Security Release
WordPress 4.7.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.
WordPress versions 4.7.1 and earlier are affected by three security issues:
- The user interface for assigning taxonomy terms in Press This is shown to users who do not have permissions to use it. Reported by David Herrera of Alley Interactive.
WP_Query
is vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Mo Jangda (batmoo).- A cross-site scripting (XSS) vulnerability was discovered in the posts list table. Reported by Ian Dunn of the WordPress Security Team.
Thank you to the reporters of these issues for practicing responsible disclosure.
Download WordPress 4.7.2 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.2.
Thanks to everyone who contributed to 4.7.2.
WordPress 4.7.2 Security Release was originally posted at https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/
January 23, 2017
Video: How to Create a Contact Form in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=OZ7oUUED9bg
January 21, 2017
WordPress 4.7 Reaches 10 Million Downloads, Releases New Security and Maintenance Update
The latest version of WordPress is proving to be a hit with users. At over 10 million, the WordPress download numbers has broken a new milestone.
Originally posted at The WP Guy - WordPress Web Design
January 17, 2017
Video: How to Link to an Email Address in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=cdaUPQIdfgQ
January 12, 2017
Amazon Associates Link Builder
The official plugin from the Amazon Associates Program.
Originally posted at The WP Guy - WordPress Web Design
January 11, 2017
WordPress 4.7.1 Security and Maintenance Release
WordPress 4.7 has been downloaded over 10 million times since its release on December 6, 2016 and we are pleased to announce the immediate availability of WordPress 4.7.1. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.
WordPress versions 4.7 and earlier are affected by eight security issues:
- Remote code execution (RCE) in PHPMailer – No specific issue appears to affect WordPress or any of the major plugins we investigated but, out of an abundance of caution, we updated PHPMailer in this release. This issue was reported to PHPMailer by Dawid Golunski and Paul Buonopane.
- The REST API exposed user data for all users who had authored a post of a public post type. WordPress 4.7.1 limits this to only post types which have specified that they should be shown within the REST API. Reported by Krogsgard and Chris Jean.
- Cross-site scripting (XSS) via the plugin name or version header on
update-core.php
. Reported by Dominik Schilling of the WordPress Security Team. - Cross-site request forgery (CSRF) bypass via uploading a Flash file. Reported by Abdullah Hussam.
- Cross-site scripting (XSS) via theme name fallback. Reported by Mehmet Ince.
- Post via email checks
mail.example.com
if default settings aren’t changed. Reported by John Blackbourn of the WordPress Security Team. - A cross-site request forgery (CSRF) was discovered in the accessibility mode of widget editing. Reported by Ronnie Skansing.
- Weak cryptographic security for multisite activation key. Reported by Jack.
Thank you to the reporters for practicing responsible disclosure.
In addition to the security issues above, WordPress 4.7.1 fixes 62 bugs from 4.7. For more information, see the release notes or consult the list of changes.
Download WordPress 4.7.1 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.1.
Thanks to everyone who contributed to 4.7.1: Aaron D. Campbell, Aaron Jorbin, Adam Silverstein, Andrea Fercia, Andrew Ozz, bonger, Boone Gorges, Chandra Patel, David Herrera, David Shanske, Dion Hulse, Dominik Schilling (ocean90), DreamOn11, Edwin Cromley, Ella van Dorpe, Gary Pendergast, James Nylen, Jeff Bowen, Jeremy Felt, Jeremy Pry, Joe McGill, John Blackbourn, Keanan Koppenhaver, Konstantin Obenland, laurelfulford, Marin Atanasov, mattyrob, monikarao, Nate Reist, Nick Halsey, Nikhil Chavan, nullvariable, Payton Swick, Peter Wilson, Presskopp, Rachel Baker, Ryan McCue, Sanket Parmar, Sebastian Pisula, sfpt, shazahm1, Stanimir Stoyanov, Steven Word, szaqal21, timph, voldemortensen, vortfu, and Weston Ruter.
WordPress 4.7.1 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
January 9, 2017
Video: How to Properly Setup Google AMP on Your WordPress Site
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=0f5EA0y285w
January 3, 2017
Video: How to Add Underline and Justify Text Buttons in WordPress
WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=p8uaIUFYNOU