WPBriefs - WordPress News in Shorts

WPBriefs

#120: Mon October 16, 2023

WordPress Community Updates: Security Patch, Create Block Tool, and More!

Binary Moon Avatar This post was curated and edited by Ben Gillbanks. Ben is a WordPress user and developer with over 20 years experience of building things online.

WordPress.org has released a security update, while new videos showcase the "WordPress Create Block" tool and discuss NASA's use of WordPress. A file upload vulnerability in a plugin has also been addressed. Check out the possibilities of WordPress Playground.

Hey there, let’s get started with another week of WP Briefs, your Artificial Intelligence source for the latest news and updates in the WordPress domain. Today is Monday 16th of October 2023.

On the 12th of October 2023, WordPress.org released a Security update for the core software. This update, known as WordPress Core 6.3.2, addresses seven different security Vulnerabilities and one potential security issue that affects multiple versions of WordPress. Users are strongly recommended to update their sites as soon as possible to ensure the security of their websites 1.

In other news from the WordPress community, a new video has been released on WordPress TV showcasing the “WordPress Create Block” command line tool 2. This tool allows users to quickly create a new block plugin by scaffolding it with pre-generated code. The video workshop provides an overview of how to get started with Create Block and demonstrates how to use it effectively.

Moving on, an unauthenticated file upload vulnerability has been addressed in the Royal Elementor Addons and Templates plugin version 1.3.79. During an investigation into compromised websites, it was discovered that this plugin had been installed on all affected sites and was responsible for allowing malicious files to be uploaded into specific directories 3.

In another video release from WordPress TV, NASA discusses its web modernization efforts and its use of WordPress as a shared launch platform for its digital platforms 4. The presentation highlights the challenges faced by NASA during this process and explains how they have revamped their flagship and science websites while also introducing on-demand streaming services using WordPress.

Lastly, there is a new video available on WordPress TV showcasing the capabilities of the WordPress Playground tool and its present and future applications 5. With this innovative tool, users can run a fully functional version of WordPress directly in their web browser or within Visual Studio Code without the need for additional installations. The video explores various examples where users can leverage these unique capabilities such as showcasing plugins or themes on the frontend without registration or risk of hacking, building entire websites for preview in Visual Studio Code, and testing code on different WordPress and PHP versions.

That wraps up today’s news from the WordPress community. Remember to update your WordPress core software, check out the Create Block tool, stay vigilant against vulnerabilities in plugins, and explore the possibilities of WordPress Playground.

If you enjoyed this episode, please tell your friends. For the text version and links to the articles mentioned in this episode, go to WPbriefs.com. Thanks for listening and we’ll see you on the next show.

  1. WordPress Core 6.3.2 Security Update – Technical Advisory 

  2. New video from WordPress TV: The WordPress Create Block tool 

  3. Unauthenticated File Upload Vulnerability Addressed in Royal Elementor Addons and Templates 1.3.79 

  4. New video from WordPress TV: For All Userkind: NASA Web Modernization and WordPress 

  5. New video from WordPress TV: WordPress Playground, Present and Future Applications 

Spotify Podcasts logo Spotify Podcasts Apple Podcasts logo Apple Podcasts Google Podcasts logo Google Podcasts Podcast RSS Feed logo Podcast RSS Feed Text RSS Feed logo Text RSS Feed
Previous
Next

Related Posts

#119: Fri October 13, 2023

WordPress Vulnerabilities, Malware Threats, and Security Updates

#98: Thu September 14, 2023

136 Vulnerabilities Exposed in WordPress, Urgent Updates Required for 4 Million Sites

#158: Thu December 07, 2023

WordPress News Roundup: Security Updates, Roadmap Insights, and More!

#100: Mon September 18, 2023

WordPress Thriving Amidst Drama, New Video Tutorial, WooSesh 2023 Announcement, and More!

#90: Mon September 04, 2023

Patchstack Reports 404 Vulnerabilities, Contract Disputes, and WordPress Updates

#156: Tue December 05, 2023

Critical Security Vulnerability in MW WP Form Plugin and WordPress Security Team Impersonation Scams