WordPress 4.7.5 Security and Maintenance Release

WordPress 4.7.5 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.7.4 and earlier are affected by six security issues:

1. Insufficient redirect validation in the HTTP class. Reported by Ronni Skansing.
2. Improper handling of post meta data values in the XML-RPC API. Reported by Sam Thomas.
3. Lack of capability checks for post meta data in the XML-RPC API. Reported by Ben Bidner of the WordPress Security Team.
4. A Cross Site Request Forgery (CRSF)  vulnerability was discovered in the filesystem credentials dialog. Reported by Yorick Koster.
5. A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files. Reported by Ronni Skansing.
6. A cross-site scripting (XSS) vulnerability was discovered related to the Customizer. Reported by Weston Ruter of the WordPress Security Team.

Thank you to the reporters of these issues for practicing responsible disclosure.

In addition to the security issues above, WordPress 4.7.5 contains 3 maintenance fixes to the 4.7 release series. For more information, see the release notes or consult the list of changes.

Download WordPress 4.7.5 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.5.

Thanks to everyone who contributed to 4.7.5.

WordPress 4.7.5 Security and Maintenance Release was originally posted at https://wordpress.org/news/2017/05/wordpress-4-7-5/

Video: How to Optimize Your WordPress Database with One Click

WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=UqNwWtbejUA

WordPress 4.8 Beta 1

We’re planning a smaller WP release early next month, bringing in three major enhancements:

• An improved visual editor experience, with a new TinyMCE that allows you navigate more intuitively in and out of inline elements like links. (Try it out to see, it’s hard to describe.)
• A revamp of the dashboard news widget to bring in nearby and upcoming events including meetups and WordCamps.
• Several new media widgets covering images, audio, and video, and an enhancement to the text widget to support visual editing.

The first beta of 4.8 is now available for testing. You can use the beta tester plugin (or just run trunk) to try the latest and greatest, and each of these areas could use a ton of testing. Our goals are to make editing posts with links more intuitive, make widgets easier for new users and more convenient for existing ones, and get many more people aware of and attending our community events.

Four point eight is here
Small changes with a big punch
Big ones come later

WordPress 4.8 Beta 1 was originally posted at https://wordpress.org/news/2017/05/wordpress-4-8-beta-1/

Video: How to Install Google Analytics in WordPress for Beginners

WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=kMpcxyqXXDE

Video: How to Let Users Filter Posts and Pages in WordPress

WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=95-i233X7ss

Video: How to Create a Multi Page Form in WordPress

WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=8cJagUugS8M

WordPress 4.7.4 Maintenance Release

After almost sixty million downloads of WordPress 4.7, we are pleased to announce the immediate availability of WordPress 4.7.4, a maintenance release.

This release contains 47 maintenance fixes and enhancements, chief among them an incompatibility between the upcoming Chrome version and the visual editor, inconsistencies in media handling, and further improvements to the REST API. For a full list of changes, consult the release notes and the list of changes.

Download WordPress 4.7.4 or visit Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.7.4.

Thanks to everyone who contributed to 4.7.4:
Aaron Jorbin, Adam Silverstein, Andrea Fercia, Andrew Ozz, aussieguy123, Blobfolio, boldwater, Boone Gorges, Boro Sitnikovski, chesio, Curdin Krummenacher, Daniel Bachhuber, Darren Ethier (nerrad), David A. Kennedy, davidbenton, David Herrera, Dion Hulse, Dominik Schilling (ocean90), eclev91, Ella Van Dorpe, Gustave F. Gerhardt, ig_communitysites, James Nylen, Joe Dolson, John Blackbourn, karinedo, lukasbesch, maguiar, MatheusGimenez, Matthew Boynes, Matt Wiebe, Mayur Keshwani, Mel Choyce, Nick Halsey, Pascal Birchler, Peter Wilson, Piotr Delawski, Pratik Shrestha, programmin, Rachel Baker, sagarkbhatt, Sagar Prajapati, sboisvert, Scott Taylor, Sergey Biryukov, Stephen Edgar, Sybre Waaijer, Timmy Crawford, vortfu, and Weston Ruter.

WordPress 4.7.4 Maintenance Release was originally posted at https://wordpress.org/news/2017/04/wordpress-4-7-4/

Video: How to Add Random Header Images to Your WordPress Blog

WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=s_XGM_F9gNk

Video: How to Create a Custom User Registration Form in WordPress

WPBeginner - WordPress Tutorials originally appeared at https://www.youtube.com/watch?v=A4oRUJL08xg

Video: How to Add Autocomplete for Address Fields in WordPress

WPBeginner - WordPress Tutorials originally appeared at http://www.youtube.com/watch?v=r4zeGIMrzzE