WordPress 3.0.3

WordPress 3.0.3 has been released and it is yet another security update.

This release fixes issues in the remote publishing interface, which under certain circumstances allowed Author- and Contributor-level users to improperly edit, publish, or delete posts.

These issues only affect sites that have remote publishing enabled.

Remote publishing is disabled by default, but you may have enabled it to use a remote publishing client such as one of the WordPress mobile apps. You can check these settings on the “Settings > Writing” screen.

Changelog: WordPress 3.0.3
Download: WordPress 3.0.3
Download: Modified files since WordPress 3.0.2

1 Star2 Stars3 Stars4 Stars5 Stars (126 votes, average: 3.82 out of 5)

WP-Polls 2.61

I have released WP-Polls 2.61 which fixes a code injection via “HTTP Referrer” and affects users who are on WP-Polls 2.60 only.

I also took this chance to port the readme.html to the proper readme.txt which WordPress.org is using and now you can see all the details of WP-Polls right from the plugins page itself regardless if it is from your WP-Admin or WordPress.org.

All users should upgrade now

Vulnerability discovered by + Props to:

Dweeks, Leon Juranic and Chad Lavoie of the Swiftwill Security Team (www.swiftwill.com)

Download: WP-Polls 2.61

1 Star2 Stars3 Stars4 Stars5 Stars (101 votes, average: 3.82 out of 5)

WordPress 3.6 Beta 1

WordPress 3.6 Beta 1 has been released! The final version of WordPress 3.6 is expected to ship on 29th April 2013.

To start off, WordPress 3.6 will ship with a new default theme, named Twenty Thirteen.

What’s New In WordPress 3.6

  • Post Formats: Post Formats now have their own UI, and theme authors have access to templating functions to access the structured data.
  • Twenty Thirteen: We’re shipping this year’s default theme in our first release of the year. Twenty Thirteen is an opinionated, color-rich, blog-centric theme that makes full use of the new Post Formats support.
  • Audio/Video: You can embed audio and video files into your posts without relying on a plugin or a third party media hosting service.
  • Autosave: Posts are now autosaved locally. If your browser crashes, your computer dies, or the server goes offline as you’re saving, you won’t lose the your post.
  • Post Locking: See when someone is currently editing a post, and kick them out of it if they fall asleep at the keyboard.
  • Nav Menus: Nav menus have been simplified with an accordion-based UI, and a separate tab for bulk-assigning menus to locations.
  • Revisions: The all-new revisions UI features avatars, a slider that scrubs through history, and two-slider range comparisons.

Download: WordPress 3.6 Beta 1

1 Star2 Stars3 Stars4 Stars5 Stars (85 votes, average: 3.82 out of 5)