December 25, 2017

Video: How to Display All Your WordPress Posts on One Page



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=Kxq2X_EflV0

December 19, 2017

December 18, 2017

Video: How to Install WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=Jzxj4oLbylY

December 11, 2017

Video: How to Easily Add Custom CSS to Your WordPress Site



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=f0_6aeZEV58

December 4, 2017

Video: How to Add a Background Image in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=4YpyiJ05YOg

November 29, 2017

WordPress 4.9.1 Security and Maintenance Release

WordPress 4.9.1 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately.

WordPress versions 4.9 and earlier are affected by four security issues which could potentially be exploited as part of a multi-vector attack. As part of the core team's ongoing commitment to security hardening, the following fixes have been implemented in 4.9.1:

  1. Use a properly generated hash for the newbloguser key instead of a determinate substring.
  2. Add escaping to the language attributes used on html elements.
  3. Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds.
  4. Remove the ability to upload JavaScript files for users who do not have the unfiltered_html capability.

Thank you to the reporters of these issues for practicing responsible security disclosure: Rahul Pratap Singh and John Blackbourn.

Eleven other bugs were fixed in WordPress 4.9.1. Particularly of note were:

  • Issues relating to the caching of theme template files.
  • A MediaElement JavaScript error preventing users of certain languages from being able to upload media files.
  • The inability to edit theme and plugin files on Windows based servers.

This post has more information about all of the issues fixed in 4.9.1 if you'd like to learn more.

Download WordPress 4.9.1 or venture over to Dashboard → Updates and click "Update Now." Sites that support automatic background updates are already beginning to update automatically.

Thank you to everyone who contributed to WordPress 4.9.1:

Alain Schlesser, Andrea Fercia, Angelika Reisiger, Blobfolio, bobbingwide, Chetan Prajapati, Dion Hulse, Dominik Schilling (ocean90), edo888, Erich Munz, Felix Arntz, Florian TIAR, Gary Pendergast, Igor Benic, Jeff Farthing, Jeffrey Paul, jeremyescott, Joe McGill, John Blackbourn, johnpgreen, Kelly Dwan, lenasterg, Marius L. J., Mel Choyce, Mário Valney, natacado, odyssey, precies, Saša, Sergey Biryukov, and Weston Ruter.



WordPress 4.9.1 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/

November 27, 2017

Video: How to Add Featured Images or Post Thumbnails in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=9admKGpM3A0

November 20, 2017

Video: How to use FTP to upload files to WordPress for Beginners



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=x3zNBt_sHJU

November 13, 2017

WordPress 4.9 Release Candidate 3

The third release candidate for WordPress 4.9 is now available.

A release candidate (RC) means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. In fact, we did miss some things in RC1 and RC2. This third release candidate was not originally scheduled, but due a number of defects uncovered through your testing of RC2 (thank you!), we are putting out another 4.9 release candidate.

We hope to ship WordPress 4.9 on Tuesday, November 14 (that’s tomorrow) at 23:00 UTC, but we still need your help to get there. If you haven’t tested 4.9 yet, now is the time! If there are additional defects uncovered through testing between now and the release time, we may delay the 4.9 release to the following day.

To test WordPress 4.9, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).

We’ve made just over 20 changes since releasing RC2 last week (as we did between RC1 and RC2). For more details about what’s new in version 4.9, check out the Beta 1, Beta 2, Beta 3Beta 4RC1, and RC2 blog posts. A few specific areas to test in RC3:

  • Switching between the Visual and Text tabs of the editor, and the syncing of the cursor between those two tabs.
  • Overriding linting errors in the Customizer’s Additional CSS editor.
  • Adding nav menu items for Custom Links in the Customizer.
  • Scheduling customization drafts (stubbed posts/pages) for publishing in the Customizer.
  • Autosave revisions for changes in the Customizer.
  • About page styling.

Developers, please test your plugins and themes against WordPress 4.9 and update your plugin’s Tested up to version in the readme to 4.9. If you find compatibility problems please be sure to post to the support forums so we can figure those out before the final release — we work hard to avoid breaking things. Please see the summative field guide to the 4.9 developer notes on the core development blog.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

Didn’t squash them all 🐛
We want to release Tuesday
New features not bugs ✨

Thanks for your continued help testing out the latest versions of WordPress.



WordPress 4.9 Release Candidate 3 was originally posted at https://wordpress.org/news/2017/11/wordpress-4-9-release-candidate-3/

Video: How to Create a Custom WordPress Widget



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=W1bRwUe4AeE

November 6, 2017

WordPress 4.9 Release Candidate 2

The second release candidate for WordPress 4.9 is now available.

A release candidate (RC) means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. We hope to ship WordPress 4.9 on Tuesday, November 14 (just over one week from now), but we need your help to get there. If you haven’t tested 4.9 yet, now is the time!

To test WordPress 4.9, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).

We’ve made just over 20 changes since releasing RC 1 last week. For more details about what’s new in version 4.9, check out the Beta 1, Beta 2, Beta 3Beta 4, and RC1 blog posts. Specific areas to test in RC2:

  • Theme installation in the Customizer.
  • Scheduling changes for publishing in the Customizer.
  • Switching themes with live preview in the Customizer.

Developers, please test your plugins and themes against WordPress 4.9 and update your plugin’s Tested up to version in the readme to 4.9. If you find compatibility problems please be sure to post to the support forums so we can figure those out before the final release — we work hard to avoid breaking things. Please see the summative field guide to the 4.9 developer notes on the core development blog.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

This week’s haiku is courtesy of @melchoyce:

We squashed all the bugs 🐛
But uh, if not, let us know
Also, test your stuff

Thanks for your continued help testing out the latest versions of WordPress.



WordPress 4.9 Release Candidate 2 was originally posted at https://wordpress.org/news/2017/11/wordpress-4-9-release-candidate-2/

Video: How to Increase the Maximum File Upload Size in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=eZgOQYXdLCk

October 31, 2017

WordPress 4.8.3 Security Release

WordPress 4.8.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.8.2 and earlier are affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Anthony Ferrara.

This release includes a change in behaviour for the esc_sql() function. Most developers will not be affected by this change, you can read more details in the developer note.

Thank you to the reporter of this issue for practicing responsible disclosure.

Download WordPress 4.8.3 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.8.3.



WordPress 4.8.3 Security Release was originally posted at https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/

October 30, 2017

Video: How to Manually Update WordPress Plugins via FTP



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=JwgzKAQPRBo

October 25, 2017

WordPress 4.9 Beta 4

WordPress 4.9 Beta 4 is now available!

This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).

For more information on what’s new in 4.9, check out the Beta 1 blog post. Since the Beta 1 release, we’ve made 70 changes in Beta 2, and 92 changes in Beta 3. In Beta 4, we’ve made 80 changes, focusing on bug fixes and finalizing new features.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

Beta 4 at last,
RC 1 draws ever near.
Let’s make it bug-free. 🐛🚫



WordPress 4.9 Beta 4 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-4/

October 23, 2017

Video: Beginners Guide How to Install a WordPress Theme



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=DXebqII9WEI

October 19, 2017

WordPress 4.9 Beta 3

WordPress 4.9 Beta 3 is now available!

This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).

For more information on what’s new in 4.9, check out the Beta 1 blog post. Since the Beta 1 release, we’ve made 70 changes in Beta 2 and 92 changes in Beta 3. A few of these newest changes to take note of in particular:

  • The plugin/theme editors now show files in a scrollable expandable tree list. See #24048.
  • Backwards compatibility has been improved for MediaElement.js, which is upgraded from 2.2 to 4.2. See #42189.
  • When you create post stubs in the Customizer (such as for nav menu items, for the homepage or the posts page), if you then schedule your customized changes or save them as a draft, then these Customizer-created posts will appear in the admin as “Customization Drafts”; these drafts can be edited before your customized changes are published, at which time these posts (or pages) will also be automatically published. See #42220.
  • Theme browsing and installation experience in the Customizer has seen some bugfixes (e.g. #42215 and #42212), with some known remaining issues outstanding in Safari.
  • There is now a callout on the dashboard to install and activate Gutenberg. See #41316.
  • Menus in the Customizer have seen additional usability improvements. See #36279 and #42114.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

Many refinements
Exist within this release;
Can you find them all?



WordPress 4.9 Beta 3 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-3/

October 16, 2017

October 12, 2017

WordPress 4.9 Beta 2

WordPress 4.9 Beta 2 is now available!

This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).

For more information on what’s new in 4.9, check out the Beta 1 blog post. Since then, we’ve made 70 changes in Beta 2.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

Let’s test all of these:
code editing, theme switches,
widgets, scheduling.



WordPress 4.9 Beta 2 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-2/

October 9, 2017

October 5, 2017

WordPress 4.9 Beta 1

WordPress 4.9 Beta 1 is now available!

This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.9, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).

WordPress 4.9 is slated for release on November 14, but we need your help to get there. We’ve been working on making it even easier to customize your site. Here are some of the bigger items to test and help us find as many bugs as possible in the coming weeks:

  • Drafting (#39896) and scheduling (#28721) of changes in the Customizer. Once you save or schedule a changeset, when any user comes into the Customizer the pending changes will be autoloaded. A button is provided to discard changes to restore the Customizer to the last published state. (This is a new “linear” mode for changesets, as opposed to “branching” mode which can be enabled by filter so that every time  user opens the Customizer a new blank changeset will be started.)
  • Addition of a frontend preview link to the Customizer to allow changes to be browsed on the frontend, even without a user being logged in (#39896).
  • Addition of autosave revisions in the Customizer (#39275).
  • A brand new theme browsing experience in the Customizer (#37661).
  • Gallery widget (#41914), following the media and image widgets introduced in 4.8.
  • Support for shortcodes in Text widgets (#10457).
  • Support for adding media to Text widgets (#40854).
  • Support for adding oEmbeds outside post content, including Text widgets (#34115).
  • Support for videos from providers other than YouTube and Vimeo in the Video widget (#42039)
  • Improve the flow for creating new menus in the Customizer (#40104).
  • Educated guess mapping of nav menus and widgets when switching themes (#39692).
  • Plugins: Introduce singular capabilities for activating and deactivating individual plugins (#38652).
  • Sandbox PHP file edits in both plugins and themes, without auto-deactivation when an error occurs; a PHP edit that introduces a fatal error is rolled back with an opportunity then for the user to fix the error and attempt to re-save. (#21622).
  • Addition of dirty state for widgets on the admin screen, indicating when a widget has been successfully saved and showing an “Are you sure?” dialog when attempting to leave without saving changes. (#23120, #41610)

As always, there have been exciting changes for developers to explore as well, such as:

  • CodeMirror editor added to theme/plugin editor, Custom CSS in Customizer, and Custom HTML widgets. Integration includes support for linters to catch errors before you attempt to save. Includes new APIs for plugins to instantiate editors. (#12423)
  • Introduction of an extensible code editor control for adding instances of CodeMirror to the Customizer. (#41897)
  • Addition of global notifications area (#35210), panel and section notifications (#38794), and a notification overlay that takes over the entire screen in the Customizer (#37727).
  • A date/time control in the Customizer (#42022).
  • Improve usability of Customize JS API (#42083, #37964, #36167).
  • Introduction of control templates for base controls (#30738).
  • Use WP_Term_Query when transforming tax queries (#37038).
  • Database: Add support for MySQL servers connecting to IPv6 hosts (#41722).
  • Emoji: Bring Twemoji compatibility to PHP (#35293). Test for any weirdness with emoji in RSS feeds or emails.
  • I18N: Introduce the Plural_Forms class (#41562).
  • Media: Upgrade MediaElement.js to 4.2.5-74e01a40 (#39686).
  • Media: Use max-width for default captions (#33981). We will want to make sure this doesn’t cause unexpected visual regressions in existing themes, default themes were all fine in testing.
  • Media: Reduce duplicated custom header crops in the Customizer (#21819).
  • Media: Store video creation date in meta (#35218). Please help test different kinds of videos.
  • Multisite: Introduce get_site_by() (#40180).
  • Multisite: Improve get_blog_details() by using get_site_by() (#40228).
  • Multisite: Improve initializing available roles when switch sites (#38645).
  • Multisite: Initialize a user’s roles correctly when setting them up for a different site (#36961).
  • REST API: Support registering complex data structures for settings and meta
  • REST API: Support for objects in schema validation and sanitization (#38583)
  • Role/Capability: Introduce capabilities dedicated to installing and updating language files (#39677).
  • Remove SWFUpload (#41752).
  • Users: Require a confirmation link in an email to be clicked when a user attempts to change their email address (#16470).
  • Core and the unit test suite is fully compatible with the upcoming release of PHP 7.2

If you want a more in-depth view of what major changes have made it into 4.9, check out posts tagged with 4.9 on the main development blog, or look at a list of everything that’s changed. There will be more developer notes to come, so keep an eye out for those as well.

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

Happy testing!

Without your testing,
we might hurt the internet.
Please help us find bugs.🐛



WordPress 4.9 Beta 1 was originally posted at https://wordpress.org/news/2017/10/wordpress-4-9-beta-1/

October 2, 2017

Video: How to Add Keywords and Meta Descriptions in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=TU196u0lsrk

September 25, 2017

Video: How to Create a Custom Page in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1ZdHI8HuboA

September 19, 2017

WordPress 4.8.2 Security and Maintenance Release

WordPress 4.8.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.8.1 and earlier are affected by these security issues:

  1. $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Slavco
  2. A cross-site scripting (XSS) vulnerability was discovered in the oEmbed discovery. Reported by xknown of the WordPress Security Team.
  3. A cross-site scripting (XSS) vulnerability was discovered in the visual editor. Reported by Rodolfo Assis (@brutelogic) of Sucuri Security.
  4. A path traversal vulnerability was discovered in the file unzipping code. Reported by Alex Chapman (noxrnet).
  5. A cross-site scripting (XSS) vulnerability was discovered in the plugin editor. Reported by 陈瑞琦 (Chen Ruiqi).
  6. An open redirect was discovered on the user and term edit screens. Reported by Yasin Soliman (ysx).
  7. A path traversal vulnerability was discovered in the customizer. Reported by Weston Ruter of the WordPress Security Team.
  8. A cross-site scripting (XSS) vulnerability was discovered in template names. Reported by Luka (sikic).
  9. A cross-site scripting (XSS) vulnerability was discovered in the link modal. Reported by Anas Roubi (qasuar).

Thank you to the reporters of these issues for practicing responsible disclosure.

In addition to the security issues above, WordPress 4.8.2 contains 6 maintenance fixes to the 4.8 release series. For more information, see the release notes or consult the list of changes.

Download WordPress 4.8.2 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.8.2.

Thanks to everyone who contributed to 4.8.2.



WordPress 4.8.2 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/

September 18, 2017

September 11, 2017

Video: What Is the Link to Logout of WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=kYqHcNDY9kg

September 4, 2017

Video: How to Create a Facebook Like Box Popup in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=K-NiRco8-m4

August 28, 2017

August 21, 2017

August 14, 2017

Video: How to Reset Passwords for All Users in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1oPXpUlrvlg

August 7, 2017

Video: How to Fix WordPress Posts Returning 404 Error



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=QhGF_KphEPk

August 2, 2017

WordPress 4.8.1 Maintenance Release

After over 13 million downloads of WordPress 4.8, we are pleased to announce the immediate availability of WordPress 4.8.1, a maintenance release.

This release contains 29 maintenance fixes and enhancements, chief among them are fixes to the rich Text widget and the introduction of the Custom HTML widget. For a full list of changes, consult the release notes, the tickets closed, and the list of changes.

Download WordPress 4.8.1 or visit Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.8.1.

Thanks to everyone who contributed to 4.8.1:
Adam Silverstein, Andrea Fercia, Andrew Ozz, Atanas Angelov, bonger, Boone Gorges, Boro Sitnikovski, David Herrera, James Nylen, Jeffrey Paul, Jennifer M. Dodd, K. Adam White, Konstantin Obenland, Mel Choyce, r-a-y, Reuben Gunday, Rinku Y, Said El Bakkali, Sergey Biryukov, Siddharth Thevaril, Timmy Crawford, and Weston Ruter.



WordPress 4.8.1 Maintenance Release was originally posted at https://wordpress.org/news/2017/08/wordpress-4-8-1-maintenance-release/

July 31, 2017

Video: How to Fix the Syntax Error in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=1k02kSS6U7M

July 24, 2017

Video: How to Install and Setup WordPress SEO Plugin by Yoast



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=4KOc-oM7Yr8

July 17, 2017

Video: How to Display Most Popular Tags in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=iAS2Xe9l_Xw

July 10, 2017

July 3, 2017

Video: How to Add Instant Search in WordPress with Algolia



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=b8NkZOtiTkM

June 26, 2017

Video: How to Create a Filterable Portfolio in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=b8_1RmRwtf0

June 19, 2017

Video: How to Display Facebook Events on Your WordPress Site



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=tDcJNAUMgvo

June 12, 2017

June 5, 2017

Video: How to Remove the Sidebar in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=mO-QIZYFNPo

June 1, 2017

WordPress 4.8 Release Candidate 2

The second release candidate for WordPress 4.8 is now available.

To test WordPress 4.8, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).

We’ve made a handful of changes since releasing RC 1 last week. For more details about what’s new in version 4.8, check out the Beta 1, Beta 2, and RC1 blog posts.

Think you’ve found a bug? Please post to the Alpha/Beta support forum. If any known issues come up, you’ll be able to find them here.

Happy testing!



WordPress 4.8 Release Candidate 2 was originally posted at https://wordpress.org/news/2017/06/wordpress-4-8-release-candidate-2/

May 29, 2017

Video: How to Add an Author Photo in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=wZCRjhphOe4

May 25, 2017

WordPress 4.8 Release Candidate

The release candidate for WordPress 4.8 is now available.

RC means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. We hope to ship WordPress 4.8 on Thursday, June 8, but we need your help to get there. If you haven’t tested 4.8 yet, now is the time!

To test WordPress 4.8, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip).

We’ve made a handful of changes since releasing Beta 2 earlier this week. For more details about what’s new in version 4.8, check out the Beta 1 and Beta 2 blog posts.

Think you’ve found a bug? Please post to the Alpha/Beta support forum. If any known issues come up, you’ll be able to find them here.

Developers, please test your plugins and themes against WordPress 4.8 and update your plugin’s Tested up to version in the readme to 4.8. If you find compatibility problems please be sure to post to the support forums so we can figure those out before the final release – we work hard to avoid breaking things. An in-depth field guide to developer-focused changes is coming soon on the core development blog.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

This release’s haiku is courtesy of @matveb:

Érrese uno
Cien veces y más
Erre ce dos

Thanks for your continued help testing out the latest versions of WordPress.



WordPress 4.8 Release Candidate was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-release-candidate/

May 22, 2017

WordPress 4.8 Beta 2

WordPress 4.8 Beta 2 is now available!

This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site just to play with the new version. To test WordPress 4.8, try the WordPress Beta Tester plugin (you’ll want “bleeding edge nightlies”). Or you can download the beta here (zip).

For more information on what’s new in 4.8, check out the Beta 1 blog post. Since then, we’ve made over 50 changes in Beta 2.

Do you speak a language other than English? Help us translate WordPress into more than 100 languages!

If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac, where you can also find a list of known bugs.

WordPress four point eight
One step closer to release
Please test Beta 2!



WordPress 4.8 Beta 2 was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-beta-2/

Video: How to Create a Donate Form for Nonprofit Organization using WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=NaZrqVv6Xhg

May 16, 2017

WordPress 4.7.5 Security and Maintenance Release

WordPress 4.7.5 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.7.4 and earlier are affected by six security issues:

  1. Insufficient redirect validation in the HTTP class. Reported by Ronni Skansing.
  2. Improper handling of post meta data values in the XML-RPC API. Reported by Sam Thomas.
  3. Lack of capability checks for post meta data in the XML-RPC API. Reported by Ben Bidner of the WordPress Security Team.
  4. A Cross Site Request Forgery (CRSF)  vulnerability was discovered in the filesystem credentials dialog. Reported by Yorick Koster.
  5. A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files. Reported by Ronni Skansing.
  6. A cross-site scripting (XSS) vulnerability was discovered related to the Customizer. Reported by Weston Ruter of the WordPress Security Team.

Thank you to the reporters of these issues for practicing responsible disclosure.

In addition to the security issues above, WordPress 4.7.5 contains 3 maintenance fixes to the 4.7 release series. For more information, see the release notes or consult the list of changes.

Download WordPress 4.7.5 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.5.

Thanks to everyone who contributed to 4.7.5.



WordPress 4.7.5 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/05/wordpress-4-7-5/

May 15, 2017

Video: How to Optimize Your WordPress Database with One Click



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=UqNwWtbejUA

May 12, 2017

WordPress 4.8 Beta 1

We’re planning a smaller WP release early next month, bringing in three major enhancements:

  • An improved visual editor experience, with a new TinyMCE that allows you navigate more intuitively in and out of inline elements like links. (Try it out to see, it’s hard to describe.)
  • A revamp of the dashboard news widget to bring in nearby and upcoming events including meetups and WordCamps.
  • Several new media widgets covering images, audio, and video, and an enhancement to the text widget to support visual editing.

The first beta of 4.8 is now available for testing. You can use the beta tester plugin (or just run trunk) to try the latest and greatest, and each of these areas could use a ton of testing. Our goals are to make editing posts with links more intuitive, make widgets easier for new users and more convenient for existing ones, and get many more people aware of and attending our community events.

Four point eight is here
Small changes with a big punch
Big ones come later



WordPress 4.8 Beta 1 was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-beta-1/

May 8, 2017

Video: How to Install Google Analytics in WordPress for Beginners



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=kMpcxyqXXDE

May 1, 2017

Video: How to Let Users Filter Posts and Pages in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=95-i233X7ss

April 24, 2017

Video: How to Create a Multi Page Form in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=8cJagUugS8M

April 20, 2017

WordPress 4.7.4 Maintenance Release

After almost sixty million downloads of WordPress 4.7, we are pleased to announce the immediate availability of WordPress 4.7.4, a maintenance release.

This release contains 47 maintenance fixes and enhancements, chief among them an incompatibility between the upcoming Chrome version and the visual editor, inconsistencies in media handling, and further improvements to the REST API. For a full list of changes, consult the release notes and the list of changes.

Download WordPress 4.7.4 or visit Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.4.

Thanks to everyone who contributed to 4.7.4:
Aaron Jorbin, Adam Silverstein, Andrea Fercia, Andrew Ozz, aussieguy123, Blobfolio, boldwater, Boone Gorges, Boro Sitnikovski, chesio, Curdin Krummenacher, Daniel Bachhuber, Darren Ethier (nerrad), David A. Kennedy, davidbenton, David Herrera, Dion Hulse, Dominik Schilling (ocean90), eclev91, Ella Van Dorpe, Gustave F. Gerhardt, ig_communitysites, James Nylen, Joe Dolson, John Blackbourn, karinedo, lukasbesch, maguiar, MatheusGimenez, Matthew Boynes, Matt Wiebe, Mayur Keshwani, Mel Choyce, Nick Halsey, Pascal Birchler, Peter Wilson, Piotr Delawski, Pratik Shrestha, programmin, Rachel Baker, sagarkbhatt, Sagar Prajapati, sboisvert, Scott Taylor, Sergey Biryukov, Stephen Edgar, Sybre Waaijer, Timmy Crawford, vortfu, and Weston Ruter.



WordPress 4.7.4 Maintenance Release was originally posted at https://wordpress.org/news/2017/04/wordpress-4-7-4/

April 17, 2017

Video: How to Add Random Header Images to Your WordPress Blog



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=s_XGM_F9gNk

April 10, 2017

Video: How to Create a Custom User Registration Form in WordPress



WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=A4oRUJL08xg

April 3, 2017

Video: How to Add Autocomplete for Address Fields in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=r4zeGIMrzzE

March 27, 2017

Video: How to Add Google Slides Presentations to WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=D3btJqev8D8

March 20, 2017

Video: How to Hide a WordPress Page From Google



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=wQSqK9erOw0

March 13, 2017

Video: How to Remove Visual Editor Mode in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=qT-4AzXVuP4

March 10, 2017

WordPress Releases Critical Security Update for Versions 4.7.2 and Earlier

There's a new security update for WordPress. https://smallbiztrends.com/2017/03/wordpress-march-2017-critical-security-update.html

The WordPress March 2017 critical security update (4.7.3) fixes scripting vulnerabilities and five other security issues as well as 39 maintenance fixes.

Originally posted at The WP Guy - WordPress Web Design

March 6, 2017

WordPress 4.7.3 Security and Maintenance Release

WordPress 4.7.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.7.2 and earlier are affected by six security issues:

  1. Cross-site scripting (XSS) via media file metadata.  Reported by Chris Andrè Dale, Yorick Koster, and Simon P. Briggs.
  2. Control characters can trick redirect URL validation.  Reported by Daniel Chatfield.
  3. Unintended files can be deleted by administrators using the plugin deletion functionality.  Reported by xuliang.
  4. Cross-site scripting (XSS) via video URL in YouTube embeds.  Reported by Marc Montpas.
  5. Cross-site scripting (XSS) via taxonomy term names.  Reported by Delta.
  6. Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources.  Reported by Sipke Mellema.

Thank you to the reporters for practicing responsible disclosure.

In addition to the security issues above, WordPress 4.7.3 contains 39 maintenance fixes to the 4.7 release series. For more information, see the release notes or consult the list of changes.

Download WordPress 4.7.3 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.3.

Thanks to everyone who contributed to 4.7.3: Aaron D. Campbell, Adam Silverstein, Alex Concha, Andrea Fercia, Andrew Ozz, asalce, blobfolio, bonger, Boone Gorges, Boro Sitnikovski, Brady Vercher, Brandon Lavigne, Bunty, ccprog, chetansatasiya, David A. Kennedy, David Herrera, Dhanendran, Dion Hulse, Dominik Schilling (ocean90), Drivingralle, Ella Van Dorpe, Gary Pendergast, Ian Dunn, Ipstenu (Mika Epstein), James Nylen, jazbek, Jeremy Felt, Jeremy Pry, Joe Hoyle, Joe McGill, John Blackbourn, John James Jacoby, Jonathan Desrosiers, Kelly Dwan, Marko Heijnen, MatheusGimenez, Mike Nelson, Mike Schroder, Muhammet Arslan, Nick Halsey, Pascal Birchler, Paul Bearne, pavelevap, Peter Wilson, Rachel Baker, reldev, Robert O’Rourke, Ryan Welcher, Sanket Parmar, Sean Hayes, Sergey Biryukov, Stephen Edgar, triplejumper12, Weston Ruter, and wpfo.



WordPress 4.7.3 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/

Video: How to Avoid Accidental Publishing in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=xxYi6LQ_OdE

February 27, 2017

Video: How to Start an Online Store in 2017



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=Rhk95JrpGhc

February 20, 2017

Video: How to Add Signature Ads After Post Content in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=zqvql0prxPI

February 13, 2017

Video: How to Add Social Media Icons in Your WordPress Sidebar



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=9c3duWOx_34

February 8, 2017

Video: How to Properly Move from Weebly to WordPress (Step by Step)



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=cuVEc2W83IQ

February 7, 2017

Video: How to Prevent Duplicate Post Titles in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=kLqR8jYc9Ok

January 30, 2017

Video: How to Add Title Attribute in WordPress Navigation Menus



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=2OE5l0WgAbE

January 26, 2017

WordPress 4.7.2 Security Release

WordPress 4.7.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.7.1 and earlier are affected by three security issues:

  1. The user interface for assigning taxonomy terms in Press This is shown to users who do not have permissions to use it. Reported by David Herrera of Alley Interactive.
  2. WP_Query is vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. Reported by Mo Jangda (batmoo).
  3. A cross-site scripting (XSS) vulnerability was discovered in the posts list table. Reported by Ian Dunn of the WordPress Security Team.

Thank you to the reporters of these issues for practicing responsible disclosure.

Download WordPress 4.7.2 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.2.

Thanks to everyone who contributed to 4.7.2.



WordPress 4.7.2 Security Release was originally posted at https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/

January 23, 2017

Video: How to Create a Contact Form in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=OZ7oUUED9bg

January 21, 2017

WordPress 4.7 Reaches 10 Million Downloads, Releases New Security and Maintenance Update

WordPress 4.7 "Vaughan" has been downloaded over 17 million times since December 6, 2016! https://smallbiztrends.com/2017/01/wordpress-download-numbers.html

The latest version of WordPress is proving to be a hit with users. At over 10 million, the WordPress download numbers has broken a new milestone.

Originally posted at The WP Guy - WordPress Web Design

January 17, 2017

Video: How to Link to an Email Address in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=cdaUPQIdfgQ

January 12, 2017

Amazon Associates Link Builder

Amazon Releases Associates Link Builder plugin for WordPress Amazon has just announced their first official plugin for WordPress – the Amazon Associates Link Builder. The Link Builder plugin makes it easier to search for, and link to, products on Amazon without leaving WordPress. It connects to Amazon's real-time Product Advertising API, which means that all information found in the Link Builder will be current and accurate including prices, images, and product availability. The Link Builder plugin is currently in open beta. Amazon is requestion that bug reports or suggestions be submitted to link-builder@amazon.com (this email is for plugin feedback only). Click here to download the plugin for free: https://wordpress.org/plugins/amazon-associates-link-builder/ Get the accompanying user guide PDF here: https://s3.amazonaws.com/aalb-public-resources/documents/AssociatesLinkBuilder-UserGuide.pdf Find the community support forum at: https://wordpress.org/support/plugin/amazon-associates-link-builder

The official plugin from the Amazon Associates Program.

Originally posted at The WP Guy - WordPress Web Design

January 11, 2017

WordPress 4.7.1 Security and Maintenance Release

WordPress 4.7 has been downloaded over 10 million times since its release on December 6, 2016 and we are pleased to announce the immediate availability of WordPress 4.7.1. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.7 and earlier are affected by eight security issues:

  1. Remote code execution (RCE) in PHPMailer – No specific issue appears to affect WordPress or any of the major plugins we investigated but, out of an abundance of caution, we updated PHPMailer in this release. This issue was reported to PHPMailer by Dawid Golunski and Paul Buonopane.
  2. The REST API exposed user data for all users who had authored a post of a public post type. WordPress 4.7.1 limits this to only post types which have specified that they should be shown within the REST API. Reported by Krogsgard and Chris Jean.
  3. Cross-site scripting (XSS) via the plugin name or version header on update-core.php. Reported by Dominik Schilling of the WordPress Security Team.
  4. Cross-site request forgery (CSRF) bypass via uploading a Flash file. Reported by Abdullah Hussam.
  5. Cross-site scripting (XSS) via theme name fallback. Reported by Mehmet Ince.
  6. Post via email checks mail.example.com if default settings aren’t changed. Reported by John Blackbourn of the WordPress Security Team.
  7. A cross-site request forgery (CSRF) was discovered in the accessibility mode of widget editing. Reported by Ronnie Skansing.
  8. Weak cryptographic security for multisite activation key. Reported by Jack.

Thank you to the reporters for practicing responsible disclosure.

In addition to the security issues above, WordPress 4.7.1 fixes 62 bugs from 4.7. For more information, see the release notes or consult the list of changes.

Download WordPress 4.7.1 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.1.

Thanks to everyone who contributed to 4.7.1: Aaron D. Campbell, Aaron Jorbin, Adam Silverstein, Andrea Fercia, Andrew Ozz, bonger, Boone Gorges, Chandra Patel, David Herrera, David Shanske, Dion Hulse, Dominik Schilling (ocean90), DreamOn11, Edwin Cromley, Ella van Dorpe, Gary Pendergast, James Nylen, Jeff Bowen, Jeremy Felt, Jeremy Pry, Joe McGill, John Blackbourn, Keanan Koppenhaver, Konstantin Obenland, laurelfulford, Marin Atanasov, mattyrob, monikarao, Nate Reist, Nick Halsey, Nikhil Chavan, nullvariable, Payton Swick, Peter Wilson, Presskopp, Rachel Baker, Ryan McCue, Sanket Parmar, Sebastian Pisula, sfpt, shazahm1, Stanimir Stoyanov, Steven Word, szaqal21, timph, voldemortensen, vortfu, and Weston Ruter.



WordPress 4.7.1 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/

January 9, 2017

Video: How to Properly Setup Google AMP on Your WordPress Site



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=0f5EA0y285w

January 3, 2017

Video: How to Add Underline and Justify Text Buttons in WordPress



WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=p8uaIUFYNOU