WordPress 5.9 is available thanks to more than 600 contributors who helped make it happen. (more…)

I was browsing wpvulndb.com when I stumbled upon the InfiniteWP Client authentication bypass. Being curios, I wanted to reverse engineer the unpublished PoC. Here's my (short) journey. Analysis The first step was to browse through the source code which is... (more…)

WordPress’ Core systems team had an eventful Friday when an error in the auto-update system caused sites to update to WordPress 5.5.3-alpha-49449, including live production sites with no auto… (more…)

A story I enjoy retelling is how a friend of mine tricked me into using WordPress. At the time, I was working with him on a career mentorship project. He’d written a book that I was publishing, and we wanted to add a premium video series to go along with ... (more…)

WordPress’s founder tweeted out a shocking accusation earlier today: Apple blocked WordPress iOS apps because it wants a cut of WordPress.com domain sales. Currently, the WordPress app doesn’t contain any in-app purchases at all, so it’s not something any... (more…)