A private Slack channel, 24 hours’ notice, and strict information-sharing rules. How the WordPress project coordinated industry-wide defenses before going public with vulnerabilities.

The first maintenance release for 7.0 fixes admin reskin issues, a CSS sanitization bug, and block editor regressions ahead of the 7.1 release.

I'm curious. Do you prefer a page builder (and if so which one) or the Native WordPress Block Editor?

Inquiring minds want to know! (Me!)

The home page for my site is looking like this so far. The only problem is that I can't get the buttons aligned horizontally.

The setup is a grid container containing 3 group items. Within each group is a H3 heading, paragraph, list items and a button. The buttons at the bottom should all line up.

There aren't many options in the actual editor for things like this. I've set the buttons to be centre justified and I've set the vertical alignment to "bottom".

I don't mind adding custom CSS in the sidebar for the blocks, but it would need to be responsive.

- I'm possibly like a broken record on this but running a community group wordpress site budget is not big. Concequently I'm looking for a free Backup and Restore solution - has anyone had any experience with xcloner.com/ #xcloner - Can they recommend it? What would be the free (not crippleware ) alternative?

Hi folks

I messed up my VPS by upgrading to newer Ubuntu version and something went wrong along the way and I basically lost access to CPanel. I tried a few things but i think its far gone.

I thought the best idea now would be to back up all the WordPress websites I have on the server (including database), export them, rebuild the VPS and import back the website.

Could you point me towards how to do it best and safest way?

Many thanks

I volunteer with a community group that uses #Wordpress for its website. So far its approach to Wordpress plugins has been fairly haphazard. Our budget is basically zero. We've ended up using various plugins for User Registration, Access control, Forms, Backup and Restore and other funcitons that are all freemium or cripleware versions of plugins that are really commerical projects by their authors.

On the otherhand we have been looking at running #CiviCRM inside wordpress and that looks to be a powerful, useful tool that's truely community open source.

What other plugins are community groups using that are true community developed opensource projects? I've tried to look through the community plugins directory on Wordpress.org and do some searches but the web is littered with promotional content for commerical 'free' plugins.

I really don't have strong connections to the wordpress community. It woudl be great to connect with other community group volunteers that are involved in Wordpress and get your input and thoughts.

Matt Mullenweg says the wheels have fallen off a bunch of things at WordPress. I agree but it's started with him and his tantrum against WP Engine and the Trademark disputes around the foundation.

Akismet claims it's catching spam comments, but there's never anything in the Spam folder despite my having "Always put spam in the Spam folder for review." set. Is it lying to me about this?

Our AI Agent recently audited Slider Future (1,000+ active installations) and identified a critical Unauthenticated RCE, now designated as CVE-2026-1405.

While pattern-matching approaches are effective at identifying broad code signatures, this specific vulnerability resides in the logical flow of the REST API.

The endpoint /upload-image/ allows unauthenticated access because the permission_callback is set to __return_true.

Check detail here:https://www.cve.org/CVERecord?id=CVE-2026-1405

@wordpress@lemmy.world @WordPress@mastodon.world @wordfence

#AppSec #ZAST #VulnerabilityResearch #WordPress #RCE

I've loved Elementor for so long. It's the page builder that I default to most of the time when I'm building sites for my clients at my agency. But lately it's gotten so bloated and hard to use.

Has anyone else noticed this?

I've build a few with the native block editor and I'm liking where that's finally heading.

Thought this was an interesting piece from WP Beginner. Granted it might be a bit bias being that the site is a WP site. But, I've seen these #'s elsewhere as well.

cross-posted from: https://lemmy.world/post/41972137

I've been a bit short sighted. I set up my WordPress instance on a server with... Not a huge amount of space. A year or so later, and now I'm running out. I have another server which I could serve files from, and it's got loads of space. Is there a way that I could get the Wordpress media library to just... Serve and upload from that one instead? Preferably migrate it there as well.

Too many people I find online get some sort of yuppie answer like an expensive plug-in with an Amazon CDN subscription. I just want to homebrew this. I don't intend to host the major site assets for the site structure on it, and I'm fine with images taking a little longer to load.

What is the easiest way to add a row in a acf repeater field from the front end? It is important that users cannot edit or delete other rows. I am struggling to find a way. One of the fields in repeater is an image.

https://salvatorenoschese.it/abbreviation-button-mu-per-gutenberg-guida-rapida/

#wordpress #plugin #WordpressDevelopment

@wp_ita @wordpress

I was sick of always fighting with WordPress to get a local set up to develop a plug-in or update the theme for a client, so I made a dev container.

As per the README, this supports:

• Automatic database dump import and site URL rename
• Automatic WordPress theme and plug-in loading from .zip, wpackagist or directory
• Mounting of a user-provided uploads directory

It also means your IDE automatically gets access to a WordPress installation for easy auto complete of WordPress functions and features when writing PHP code.

Theoretically, it can also easily be converted into a normal container if you don't use VSCode by setting up /workspace as a mount. Dev containers are unfortunately a bit broken with JetBrains products, and this container will not launch.

Contributions welcome!

Hello, I'd really like to post automatically from my website to Lemmy, do you happen to know any guide or plugin or whatever to achieve such goal?

I already use the Activity Pub plugin to post my website posts on Mastodon. I guess being in the fediverse it shouldn't be hard to have those posts here on Lemmy as well, am I wrong?

Thank you Marco

Matt Mullenweg went on The Verge's Decoder podcast at the end of June. Pretty enlightening. Also Tumblr isn't coming to the fediverse anytime soon. Bah!

I want to redesign my personal site around two things:

1 - Home page will be a personal landing page, like those “link in bio” tools to show people where you have accounts on social media, newsletters, etc. (such as https://bio.link/. I can share a basic personal page I’ve set up there but I don’t know if that’s allowed here)

2 - A decent blog experience, mainly for writing, sharing news links, and art I like (both personal and found)

Anyone know of a theme that tackles these two? I’m coming up empty handed with ThemeForest and Template Monster, even when trying variations of these keywords.

Thanks

I am not much old on lemmy and l have a lot of questions. Please don't assume me to be an AI 😊😊😊

My boss thinks it's very cute to talk about AI as much as possible, and today asked if I'd heard of "vibe coding". I said yeah, and explained to my coworker that it's where you get a chatbot to write all your code.

My boss has just announced that he's vibe coding. I know the project he's working on. It took us months to put that codebase together, and there are a lot of very complex functions and plugins in that site that we've written to integrate with all the systems our client needs the site to use.

What am I supposed to do here? He's just letting a chatbot go rogue on the codebase. Do I just leave him to it with the full knowledge that it'll fall on me and my colleague to repair all this damage, presumably while being accused of breaking the site in the first place? I need the money from this job so unfortunately leaving isn't an option at this stage.

It has been long in the coming (Oracle bought Sun and MySQL over 15 years ago), but seems WordPress is finally at the point where MariaDB popularity surpassed MySQL as shown by stats at https://wordpress.org/about/stats/.

The share of MySQL 8.4 users is oddly low, just 0.1 %. One would think it would still be at least 1% or something..