News in the WordPress world, April/May 2015

Update all the sites!

There were quite a few releases in the past few weeks:

  • 4.1.2, 4.2, 4.2.1, 4.2.2
  • Popular plugins, Security plugins (iThemes Security), Core, … Everyone has had their share of security issues in the past few weeks.
  • Luckily, WordPress’ Automatic Updater took care of most of these updates for you. You can learn more about the updater and how to configure it here.
  • The last security issue concerned Genericons, an icon font that’s bundled into several themes including Twenty Fifteen, and in popular plugins like Jetpack. You can read more about the vulnerability here.
  • Update fatigue is dangerous. Don’t give up, update, and thank the Core Security team who’s there to save us by reacting quickly and shipping new releases to fix all these issues. Now Requires Theme Authors to Use the Customizer to Build Theme Options

From now on, all themes submitted to the theme repository will have to use the Customizer for their theme options:


If you are not familiar with the customizer, and if you’d like to add options to your theme, I would suggest checking out the Customizer API docs on

WordPress 4.3 will be all about enabling users of touch and small-screen devices.

WordPress 4.2 was shipped a couple of weeks ago, and the core developers are already planning 4.3. You can find out more about the focus of the next major WordPress release here:


I would also suggest subscribing to make/flow if you’d like to help with testing and share your opinions.

WordPress’s Rest API is still in the works, version 2.0 was released a few weeks ago

  • The developers in charge of the API are looking for testers. If you’re interested, and if you want that feature to make it into core sooner rather than later, watch the GitHub repo and submit bug reports!

#meetup, #news