1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
|
<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
>
<channel>
<title>WordPress News</title>
<atom:link href="http://wordpress.org/news/feed/" rel="self" type="application/rss+xml" />
<link>http://wordpress.org/news</link>
<description>WordPress News</description>
<lastBuildDate>Thu, 24 Jan 2013 22:23:03 +0000</lastBuildDate>
<language>en-US</language>
<sy:updatePeriod>hourly</sy:updatePeriod>
<sy:updateFrequency>1</sy:updateFrequency>
<generator>http://wordpress.org/?v=3.6-alpha-23386</generator>
<item>
<title>WordPress 3.5.1 Maintenance and Security Release</title>
<link>http://wordpress.org/news/2013/01/wordpress-3-5-1/</link>
<comments>http://wordpress.org/news/2013/01/wordpress-3-5-1/#comments</comments>
<pubDate>Thu, 24 Jan 2013 22:23:03 +0000</pubDate>
<dc:creator>Andrew Nacin</dc:creator>
<category><![CDATA[Releases]]></category>
<category><![CDATA[Security]]></category>
<guid isPermaLink="false">http://wordpress.org/news/?p=2531</guid>
<description><![CDATA[WordPress 3.5.1 is now available. Version 3.5.1 is the first maintenance release of 3.5, fixing 37 bugs. It is also a security release for all previous WordPress versions. For a full list of changes, consult the list of tickets and the changelog, which include: Editor: Prevent certain HTML elements from being unexpectedly removed or modified in rare [...]]]></description>
<content:encoded><![CDATA[<p>WordPress 3.5.1 is now available. Version 3.5.1 is the first maintenance release of 3.5, <a href="http://core.trac.wordpress.org/milestone/3.5.1">fixing 37 bugs</a>. It is also a security release for all previous WordPress versions. For a full list of changes, consult the <a href="http://core.trac.wordpress.org/query?milestone=3.5.1">list of tickets</a> and the <a href="http://core.trac.wordpress.org/log/branches/3.5?rev=23341&stop_rev=23167">changelog</a>, which include:</p>
<ul>
<li>Editor: Prevent certain HTML elements from being unexpectedly removed or modified in rare cases.</li>
<li>Media: Fix a collection of minor workflow and compatibility issues in the new media manager.</li>
<li>Networks: Suggest proper rewrite rules when creating a new network.</li>
<li>Prevent scheduled posts from being stripped of certain HTML, such as video embeds, when they are published.</li>
<li>Work around some misconfigurations that may have caused some JavaScript in the WordPress admin area to fail.</li>
<li>Suppress some warnings that could occur when a plugin misused the database or user APIs.</li>
</ul>
<p>Additionally, a bug affecting Windows servers running IIS can prevent updating from 3.5 to 3.5.1. If you receive the error “Destination directory for file streaming does not exist or is not writable,” you will need to <a href="http://codex.wordpress.org/Version_3.5.1">follow the steps outlined on the Codex</a>.</p>
<p>WordPress 3.5.1 also addresses the following security issues:</p>
<ul>
<li>A server-side request forgery vulnerability and remote port scanning using pingbacks. This vulnerability, which could potentially be used to expose information and compromise a site, affects all previous WordPress versions. This was fixed by the WordPress security team. We’d like to thank security researchers <a href="http://codeseekah.com/">Gennady Kovshenin</a> and <a href="http://www.ethicalhack3r.co.uk/">Ryan Dewhurst</a> for reviewing our work.</li>
<li>Two instances of cross-site scripting via shortcodes and post content. These issues were discovered by Jon Cave of the WordPress security team.</li>
<li>A cross-site scripting vulnerability in the external library Plupload. Thanks to the Moxiecode team for working with us on this, and for releasing Plupload 1.5.5 to address this issue.</li>
</ul>
<p><strong><a href="http://wordpress.org/download/">Download 3.5.1</a> or visit Dashboard → Updates in your site admin to update now.</strong></p>
]]></content:encoded>
<wfw:commentRss>http://wordpress.org/news/2013/01/wordpress-3-5-1/feed/</wfw:commentRss>
<slash:comments>0</slash:comments>
</item>
<item>
<title>2012: A Look Back</title>
<link>http://wordpress.org/news/2013/01/2012-a-look-back/</link>
<comments>http://wordpress.org/news/2013/01/2012-a-look-back/#comments</comments>
<pubDate>Tue, 01 Jan 2013 02:22:20 +0000</pubDate>
<dc:creator>Jen Mylo</dc:creator>
<category><![CDATA[Uncategorized]]></category>
<guid isPermaLink="false">http://wordpress.org/news/?p=2525</guid>
<description><![CDATA[Another year is coming to a close, and it’s time to look back and reflect on what we’ve accomplished in the past twelve months. The WordPress community is stronger than ever, and some of the accomplishments of the past year are definitely worth remembering. Software Releases We had two major releases of the WordPress web [...]]]></description>
<content:encoded><![CDATA[<p>Another year is coming to a close, and it’s time to look back and reflect on what we’ve accomplished in the past twelve months. The WordPress community is stronger than ever, and some of the accomplishments of the past year are definitely worth remembering.</p>
<h4>Software Releases</h4>
<p>We had two major releases of the WordPress web application with versions <a href="http://wordpress.org/news/2012/06/green/">3.4</a> and <a href="http://wordpress.org/news/2012/12/elvin/">3.5</a>, as well as 5 security releases during 2012. 3.4 included the theme customizer, while 3.5 became the long awaited “media release” featuring a new uploader and gallery management tool. 3.5 contained code contributions from more people than ever, and we hope to continue growing the contributor ranks in the year ahead. We currently have native apps on 6 mobile platforms — <a href="http://ios.wordpress.org/">iOS</a>, <a href="http://android.wordpress.org/">Android</a>, <a href="http://blackberry.wordpress.org/">Blackberry</a>, <a href="http://wpwindowsphone.wordpress.com/">Windows Phone</a>, <a href="http://nokia.wordpress.org/">Nokia</a>, and <a href="http://webos.wordpress.org/">WebOS</a> — and saw several updates there as well.</p>
<h4>Plugin Directory</h4>
<p>A number of improvements were made to the Plugin Directory in 2012. More cosmetic updates, like the introduction of branded plugin page headers, make it a nicer browsing experience, while functional changes like better-integrated support forums, plugin reviews, and a favorites system made the plugin directory even more useful as a resource.</p>
<h4>The “Make” Network and Team Reps</h4>
<p>2012 was the year that saw the creation of <a href="http://make.wordpress.org/">Make.wordpress.org</a>, a network of sites for the teams of contributors responsible for the different areas of the WordPress project. Now anyone can follow along and get involved with the teams that work on <a href="http://make.wordpress.org/core/">core</a>, <a href="http://make.wordpress.org/themes/">theme review</a>, <a href="http://make.wordpress.org/support/">forum support</a>, <a href="http://make.wordpress.org/docs/">documentation</a>, and more. In 2013 we’ll work to improve these sites to make it easier to become a contributor. Each team also now has elected Team Reps, a new role that has already led to more cross-team communication. Team reps post each week to the <a href="https://make.wordpress.org/updates/">Updates blog</a> so that the other reps can keep up with what’s going on in other teams.</p>
<h4>WordPress Community Summit</h4>
<p>At the end of October, about 100 of the most influential and respected members of the WordPress community attended an inaugural <a href="https://make.wordpress.org/summit">summit</a> to discuss where we all stand, and to figure out where we go next with WordPress. A “conference of conversations,” this unconference made everyone an active participant, and while not every issue brought to the table was solved by the end of the event, the right questions were being asked.</p>
<h4>Meetup.com</h4>
<p>The WordPress Foundation now has a central account with Meetup.com. We’ve brought in a couple dozen existing meetup groups as a pilot to test the system, and are in the process of working with more existing meetups (as well as new ones) to join us so that local organizers won’t have to pay organizer dues and can get more support from the WordPress project.</p>
<h4>Internet Blackout Day</h4>
<p>We participated in the protest against SOPA/PIPA, Internet Blackout Day, on January 18. Though we usually stay out of politics, this campaign was important, and we not only participated in the blackout on WordPress.org, we encouraged our users to do so as well, and recommended plugins to provide blackout functionality. It was deemed the <a href="http://sopastrike.com/numbers/">largest online protest in history</a>.</p>
<h4>WordCamps</h4>
<p>And finally, it wouldn’t be a recap without counting up the <a href="http://wordcamp.org">WordCamps</a>! There were 67 WordCamps around the world in 2012, bringing together WordPress users, developers, and fans. If you didn’t make it to a WordCamp this year, maybe it can be one of your new year resolutions: <a href="http://central.wordcamp.org/schedule/">check the schedule</a> to find one near you!</p>
]]></content:encoded>
<wfw:commentRss>http://wordpress.org/news/2013/01/2012-a-look-back/feed/</wfw:commentRss>
<slash:comments>0</slash:comments>
</item>
<item>
<title>WordPress 3.5 “Elvin”</title>
<link>http://wordpress.org/news/2012/12/elvin/</link>
<comments>http://wordpress.org/news/2012/12/elvin/#comments</comments>
<pubDate>Tue, 11 Dec 2012 16:54:23 +0000</pubDate>
<dc:creator>Matt Mullenweg</dc:creator>
<category><![CDATA[Releases]]></category>
<guid isPermaLink="false">http://wordpress.org/news/?p=2517</guid>
<description><![CDATA[It’s the most wonderful time of the year: a new WordPress release is available and chock-full of goodies to delight bloggers and developers alike. We’re calling this one “Elvin” in honor of drummer Elvin Jones, who played with John Coltrane in addition to many others. If you’ve been around WordPress a while, the most dramatic [...]]]></description>
<content:encoded><