Jetpack Adds Podcasting Tools Built Right Into WordPress
A new WP Tavern podcast episode digs into Jetpack's podcasting features, letting creators publish, distribute, and manage shows directly from their WordPress sites.
Tag
wordpress
All posts in this stream, newest first.
Human Made’s K. Adam White on Migrating Enterprises to Block Editor
In a WP Tavern podcast, Human Made's K. Adam White explains how large organizations move complex legacy content into WordPress' block editor without sacrificing editorial control or brand consistency.
Critical Auth Bypass Found in WPMU DEV Dashboard Plugin
Wordfence's Argus research team discovered a critical authentication bypass in the WPMU DEV Dashboard plugin, installed on an estimated 350,000 sites, that can let unauthenticated attackers gain administrator access.
WordPress Joins Open Letter Backing Open Weight AI Models
WordPress has signed the Open Weights and American AI Leadership letter, joining more than 270 companies asking US policymakers to avoid early restrictions on downloadable, modifiable AI models.
Critical Privilege Escalation Flaw Found in Pods WordPress Plugin
Wordfence disclosed an unauthenticated privilege escalation vulnerability in the Pods plugin, which is active on more than 100,000 WordPress sites and can lead to full site takeover.
WordPress Security Myths That Waste Your Time
Renaming your login URL, hiding your version number, and swapping your table prefix feel like security work. They mostly aren't. Here's what actually reduces risk, and how to do it.
Monitoring and Audit Logs: Knowing When Something Is Wrong
A working WordPress site can hide a compromise for weeks if nobody is watching. Here is the minimum observability stack, uptime checks, file-change detection, and activity logs, that turns a silent breach into something you catch the same day.
Locking Down wp-content/uploads: Closing WordPress’s Classic Backdoor
The uploads folder is writable by design, which makes it the favorite hiding spot for PHP shells. Here's how to make the whole tree inert to code execution without touching your media.
Stopping User Enumeration and REST API Leaks
Attackers do not need to guess your usernames if your site is handing them out through author archives and the REST API. Here is how the leak happens and how to close it without breaking anything you actually need.
Security Headers for WordPress: HSTS, CSP and Friends
A practical, non-breaking rollout order for HSTS, CSP, and the other browser-enforced security headers, plus how to verify each one actually took effect.