AdultZone

Archives

WordPress.org blog: WordPress 7.0.3 release

WordPress 7.0.3 is now available WordPress 7.0.3 is now available which features several security fixes. Because this is a security release, it is recommended that you update your sites immediately. You can update to WordPress 7.0.3 by downloading it from WordPress.org, or visiting your site’s Dashboard → Updates and clicking Update Now. Sites that support automatic background updates will begin updating shortly. For more information, please visit the WordPress 7.0.3 HelpHub site. Security updates included in this release The security team would like to thank the following people for responsibly reporting vulnerabilities and allowing them to be fixed in this release: Pre-auth reflected cross-site scripting (XSS) on the login screen with potential to lead to PHP code execution reported by the team at pwn.ai. Contributor+ stored cross-site scripting (XSS) in posts via the emoji settings element reported by Asaf Mozes (amosec) Contributor+ stored cross-site scripting (XSS) in the Post Content block reported by n05ec Contributor+ stored cross-site scripting (XSS) in Quick Edit on sites with a large number of users reported by Naveen S and Ajmal Moochingal Contributor+ stored cross-site scripting (XSS) in the Post Date block reported by Alex Concha of the WordPress Security Team A privilege escalation issue on multisite networks with user registration enabled, allowing a user to create a new site reported by Aikido Security An information disclosure issue in the Latest Comments block exposing comments on password-protected posts reported by Ehtisham Siddiqui of the WordPress Security Team Enumeration of post slugs reported by HDWSec Disclosure of notes in comment feeds reported by Elio Gubser Author+ CSS injection via a bypass of the safe CSS attribute filter reported by Anthropic Bypass of the email address confirmation flow reported by 0ways A server-side request forgery (SSRF) issue in URL validation allowing requests to link-local ranges reported by Andrew Mohawk and multiple independent reporters Backports As a courtesy, these fixes are being backported, where necessary, to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported. The backports are in progress and will ship as they become ready. WordPress 7.1 RC2 has also been released, containing all applicable fixes. CVE and GHSA references Details of the login screen XSS vulnerability can be found in the advisory: CVE-2026-64638 / GHSA-52p2-r8wf-jcrf. Thank you to these WordPress contributors This release was led by John Blackbourn. In addition to the security researchers mentioned above, WordPress 7.0.3 and its backports would not have been possible without the significant contributions of the following people:Aaron D. Campbell, Aaron Jorbin, Adam Silverstein, adrianmoldovanwp, Aki Hamano, Alex Concha, Andrew Duthie, Andrew Serong, annezazu, Barry, Bernie Reiter, Daniel, Daniel Richards, David Biňovec, Dennis Snell, Ehtisham Siddiqui, Erwan Le Rousseau, Fabian Kaegy, fiocavallari, George Mamadashvili, gubser, Isabel Brison, Jarda Snajdr, Jb Audras, Jeremy Felt, Joe Dolson, Joe Hoyle, John Blackbourn, Jon Surrell, Jonathan Desrosiers, Khokan Sardar, Lance Willett, lucasbustamante, lucatume, Marco Ciampini, Marin Atanasov, Mohammad Jangda, Mukesh Panchal, Paul Kevan, Peter Wilson, ramonopoly, SergeyBiryukov, vortfu, Weston Ruter Join us for the launch of WordPress 7.1 at WordCamp US 2026, August 16–19.

Matt: Our Core Division

Inspired by Automatticians James Kemp and Dave Smith, I’ve been thinking a lot about how much of our discord in the design of WordPress stems from the differences of our two big tribes: Bloggers and Builders. Many of the OG developers of WordPress, including myself, tend more towards the blogging side. Writers, photographers, podcasters, journalists, the people for whom a reverse chronological stream on the homepage is the most obvious thing in the world. We link out a lot, love comments, social features and think a lot about the editor as a writing environment. Builders are the site shapers, webmasters, the agencies, the companies, the content managers that think in a more page-first rather than post-first way. Tagging? Blogroll? Date-based permalinks? Who needs them. Give me custom fields, rich templates, a site editor, to craft beautiful sturdy pages that will stand the test of time. A store with a catalog of items where what changes is the inventory and ratings, not the content. The Builders right now dominate our core development discourse, which makes sense. They hold a lot of the economic share with merchants and rich websites. They’re also more loyal. The Bloggers love their WordPress as the place they truly own and call home, but Bloggers have an account on every channel where there’s an audience, they syndicate out with an ephemerality mindset, because that reader/listener/follower connection is the spark that keeps their flame alive. A Builder would never be a digital sharecropper on someone else’s domain. Dave Smith has been doing some very interesting explorations of a simpler site editor, and you hear his Builder bias around 3:20 in how obvious a static homepage as default seems to him. The good news is we can coexist as we have at least since WordPress 1.5. We just need to give a little more love to the Blogger side, there’s so much cool stuff we could do in the Fediverse with RSS, ActivityPub, ATProto, blogrolls (link manager is still in wp-admin!), pingbacks…

WordPress.org blog: WordPress 7.1 Release Candidate 1

The first Release Candidate (“RC1”) for WordPress 7.1 is ready for download and testing! This version of the WordPress software is still under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, it’s recommended to evaluate RC1 on a test server and site. WordPress 7.1 RC1 can be tested using any of the following methods: Plugin Install and activate the WordPress Beta Tester plugin on a WordPress install. (Select the “Bleeding edge” channel and “Beta/RC Only” stream.) Direct Download Download the RC1 version (zip) and install it on a WordPress website. Command Line Use this WP-CLI command: wp core update –version=7.1-RC1 WordPress Playground Use the WordPress Playground instance to test the software directly in your browser. No setup required – just click and go! The scheduled final release date for WordPress 7.1 is August 19, 2026. The full release schedule can be found here. Your help testing Beta and RC versions is vital to making this release as stable and powerful as possible. Thank you to everyone who contributes by testing! Please continue checking the Make WordPress Core blog for 7.1-related posts in the coming weeks for more information. What’s in WordPress 7.1 RC1? WordPress 7.1 RC1 contains more than 145 updates and fixes since the Beta 4 release, including 57 in the Editor and 88 in Core. For an overview of what’s new in WordPress 7.1, read the Beta 1 announcement and the WordPress 7.1 Dev Notes. For a comprehensive summary, see the WordPress 7.1 Field Guide. You can also explore the technical details of all issues addressed since Beta 4 using the links below: GitHub commits for 7.1 since July 29, 2026 Closed Trac tickets for 7.1 since July 29, 2026 New Features since Beta 1 Icons API: New APIs for registering icons and icon collections in Core, ready for plugins to extend. Speculative loading configuration: Speculative loading defaults can now be configured via environment variables and constants. Email notifications for @mentions: Email notifications have been introduced when mentioned in a Note. Shareable Revisions: Share links to specific revisions for faster collaboration. Want to look deeper into the details and technical notes for this release? These tickets and pull requests are just some of the latest updates: #GB-79839: Apply globally: choose which modified block styles to apply #GB-80814: New responsiveEditingEnabled editor setting to hide responsive styles #GB-80107: Tabs: toolbar buttons to reorder tabs #GB-80046: DataViews: shift-click range selection #65636: Preload REST API requests fetched on editor load #65613: Notes are excluded from comment feed queries #65491: KSES allows the autofocus attribute on dialog elements #65517: Multisite upload limits are enforced when sideloading media from a URL #62757: Update the jQuery UI library to version 1.14.2 How you can contribute WordPress is open source software made possible by a passionate community of people collaborating on and contributing to its development. The resources below outline various ways you can help the world’s most popular open source web platform, regardless of your technical expertise. Get involved in testing Testing for issues is crucial to the development of any software. It’s also a meaningful way for anyone to contribute. Your help testing the WordPress 7.1 RC1 version is key to ensuring that the final release is the best it can be. While testing the upgrade process is essential, trying out new features is equally important. This detailed guide will walk you through testing features in WordPress 7.1. Update your theme or plugin For plugin and theme authors, your products play an integral role in extending the functionality and value of WordPress for all users. Thanks for continuing to test your themes and plugins with the WordPress 7.1 beta releases. With RC1, you’ll want to conclude your testing and update the “Tested up to” version in your plugin’s readme file to 7.1. If you find compatibility issues, please post detailed information to the support forum. Test on your hosting platforms Web hosts provide vital infrastructure for supporting WordPress and its users. Testing on hosting systems helps inform the development process while ensuring that WordPress and hosting platforms are fully compatible, free of errors, optimized for the best possible user experience, and that updates roll out to customer sites without issue. Want to test WordPress on your hosting system? Get started with configuring distributed hosting tests here. Thank you to all web hosts who help test WordPress! Curious about testing releases in general? Follow along with the testing initiatives in Make Core and join the #core-test channel on Making WordPress Slack. An RC1 haiku A candidate standsthe desert sun tests its strengthArizona waits Props to @krupajnanda, @annezazu, @amykamala, @wildworks and @masteradhoc for collaboration and review Join us for the launch of WordPress 7.1 at WordCamp US 2026, August 16–19.

WPTavern: #228 – Priscilla Collado Ramirez on Reducing WordPress Beginner Anxiety

Transcript [00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley. Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the themes, the blocks, and in this case, reducing WordPress beginner anxiety in a multitude of ways. If you’d like to subscribe to the podcast, you can do that by searching for WP Tavern in your podcast player of choice, or by going to wptavern.com/feed/podcast, and you can copy that URL into most podcast players. If you have a topic that you’d like us to feature on the podcast, I’m keen to hear from you and hopefully get you, or your idea, featured on the show. Head to wptavern.com/contact/jukebox and use the form there. So on the podcast today we have Priscilla Collado Ramirez. Priscilla travelled 14 hours from Costa Rica to attend WordCamp Europe, making her one of the furthest attendees at the event, and for good reason. She’s an educator, fashion designer and wellness coach, and has a unique perspective on a challenge many in the WordPress community face, how overwhelming WordPress can be for beginners. Having once quit WordPress 17 years ago, due to information overload, and a lack of community support, Priscilla’s story comes full circle, as she now dedicates herself to helping entrepreneurs and creatives find their way in the WordPress ecosystem. Her work focuses on demystifying those first confusing moments, offering practical steps, and much needed reassurance for anyone who’s ever opened a fresh install and wondered, what on earth do I do next? The conversation is focused on why newcomers often feel stuck, paralysed by too many choices, the classic it depends advice, and a fear of breaking something or everything. We get into the importance of understanding individual learning styles, whether linear or spiral, as Priscilla labels them, and meeting students where they are, sometimes with literal breathing exercises and wellness techniques to lower stress and unlock real learning. Priscilla explains how confidence in WordPress is built through action, and why celebrating small wins, like successfully installing a single plugin, is essential. She also shares her approach to bringing holistic, calm, and patient mentorship into WordPress education, something that’s as relevant for agency leads as it is for first time bloggers. If you’ve ever felt overwhelmed by WordPress’ infinite possibilities, struggled to find your place in its community, or just want practical wisdom on making the path easier for beginners, this episode is for you. If you’re interested in finding out more, you can find all of the links in the show notes by heading to wptavern.com/podcast, where you’ll find all the other episodes as well. And so without further delay, I bring you Priscilla Collado or Ramirez. I am joined on the podcast by Priscilla Collado Ramirez. Although I know that’s not the correct way to say it, would you please say your name for me? [00:03:44] Priscilla Collado Ramirez: It’s good, it’s good. I’m Priscilla Collado Ramirez, and I’m from Costa Rica. [00:03:48] Nathan Wrigley: Well, I appreciate it. Thank you. You get the award without a doubt coming the furthest, I think, to WordCamp Europe this year. I don’t know how many miles it is, but you said, I think it was 13 hours. [00:03:59] Priscilla Collado Ramirez: Yeah, 14 hours on the plane. Today is travelling. But it’s all worth it, because this country in Europe, it’s beautiful. So I can do it all the years, all the months. Yeah, I can do it. [00:04:13] Nathan Wrigley: I have to ask though, why come all the way across, so many hours on a plane and what have you. Do you have a community where you are? Is there a thriving kind of Costa Rican WordPress scene? I don’t know anything about it. [00:04:28] Priscilla Collado Ramirez: Okay. Yeah, in Costa Rica is a big community. It’s the biggest community in whole Latin America, in Costa Rica. I have a friend, she works for GreenGeeks web hosting, so she empowered me to do this. And the WordCamp Europe, because being a speaker is one of my dreams come true. I already do it in my country, but I want to get more knowledge and know more people. And when she told me about this, I said, yeah, I can do it. Yeah, I want to do it. [00:05:06] Nathan Wrigley: That is remarkable. A 13 hour plane journey. That’s pretty impressive. And I confess, I didn’t know that Costa Rica was sort of the place to be if you’re in South America. But now I do. Thank you. And I know that you’ve basically just come out of the presentation room, you’ve just finished the subject that you were talking about. And the subject that you were talking about is really interesting to me at least, because this casts me back. I’ve been in the WordPress space since about, I don’t know, 2015, something like that. So I’ve got a few years under my belt. But I do remember at the time when I began using WordPress, turning up to events like this and feeling a bit like a fish out of water, not really knowing what to do. Not really knowing what to do with the software, either. Not really knowing what I should install, whether I should install anything, whether I was using the best thing, or the worst thing or what have you. And that kind of was the nature of your subject. But rather than me telling everybody what you were talking about, do you just want to summarise what it was that you stood up and presented about? [00:06:02] Priscilla Collado Ramirez: Yeah, of course. And I feel the same way that you. Well, my talk is about why WordPress feels overwhelming for beginners. I was that beginner that I don’t want to install. And WordPress, it’s great, but sometimes gives you too many options, right? So for beginners,

Greg Ziółkowski: The Abilities API in WordPress 7.1: Lifecycle, Schemas, and Discovery

The Abilities API gives WordPress plugins a common language for describing and executing units of functionality. An ability has a stable name, human-readable metadata, input and output contracts, a permission check, and an execution callback. Other PHP code can discover it without knowing which plugin registered it, while REST, WP-CLI, JavaScript, MCP, and AI integrations […]