Let's say that you had a site that runs on PHP, which of course your Wordpress instance does, and you wanted to use HTTP2 Server Push to push down two CSS... (more…)

This is a follow-up to our story titled “Display Widgets Plugin Includes Malicious Code to Publish Spam on WP Sites“. In this post, we explore who is behind the purchase and corruption of the Display Widgets plugin and at least two other popular WordPress... (more…)

In the first article in our new series on using version control with WordPress, we look at keeping a plugin or theme in Git. (more…)

Introduced to WordPress writers, theme developers and implementers in WordPress 5.5 release, Block Patterns, tested in the Gutenberg plugins since its 7.7 version, came to all WordPress sites. They open the door to be creative with blocks and make creativ... (more…)

CVE 2017 8295 discovered by Dawid Golunski, Medium/High vulnerability still not fixed in 4.8.1. This issue has been reported to WordPress security team multiple times with the first report sent back in July 2016. It was reported both directly via security... (more…)