WordPress

WordPress 4.6.1 Security and Maintenance Release WordPress 4.6.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.6 and earlier are affected by two security issues: a cross-site scripting vulnerability via image filename, reported by SumOfPwn researcher Cengiz Han Sahin; and a path traversal vulnerability in the upgrade package uploader, reported by Dominik Schilling from the WordPress security team. Thank you to the reporters for practicing responsible disclosure. In addition to the security issues above, WordPress 4.6.1 fixes 15 bugs from 4.6. For more information, see the release notes or consult the list of changes. Download WordPress 4.6.1 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that support automatic background updates are already beginning to update to WordPress 4.6.1. Thanks to everyone who contributed [ more… ]

WordPress 4.6 “Pepper” Version 4.6 of WordPress, named “Pepper” in honor of jazz baritone saxophonist Park Frederick “Pepper” Adams III, is available for download or update in your WordPress dashboard. New features in 4.6 help you to focus on the important things while feeling more at home. Streamlined Updates Don’t lose your place: stay on the same page while you update, install, and delete your plugins and themes. Native Fonts The WordPress dashboard now takes advantage of the fonts you already have, making it load faster and letting you feel more at home on whatever device you use. Editor Improvements Inline Link Checker Ever accidentally made a link to https://wordpress.org/example.org? Now WordPress automatically checks to make sure you didn’t. Content Recovery As you type, WordPress saves your content to the browser. Recovering saved content is even easier with WordPress 4.6. [ more… ]

WordPress 4.6 Release Candidate The release candidate for WordPress 4.6 is now available. We’ve made a few refinements since releasing Beta 4 a week ago. RC means we think we’re done, but with millions of users and thousands of plugins and themes, it’s possible we’ve missed something. We hope to ship WordPress 4.6 on Tuesday, August 16, but we need your help to get there. If you haven’t tested 4.6 yet, now is the time! Think you’ve found a bug? Please post to the Alpha/Beta support forum. If any known issues come up, you’ll be able to find them here. To test WordPress 4.6, you can use the WordPress Beta Tester plugin or you can download the release candidate here (zip). For more information about what’s new in version 4.6, check out the Beta 1, Beta 2, Beta 3, and Beta 4 blog posts. [ more… ]