News in the WordPress world, May 2016

News in the WordPress world, May 2016

Security, Security, Security

This month was again a proof that you need to keep WordPress, your themes, and your plugins up to date! Security updates were released for Jetpack, Caldera Forms, WP Fastest Cache, WordFence, Yoast SEO, Ninja Forms, and others. WordPress itself released an update to address potential security issues with its media players.

A New Plugin Repository

The plugin repo available at will be redesigned soon. You can check the first prototypes here, and you can chime in on the taxonomies that will be used to sort plugins here. These changes should help each one of us finding the right plugins, faster.

Authentication in the REST API

We’ve talked quite a bit about the REST API in the past year. Agencies and WordPress professionals start using it more and more to build interesting things on top of WordPress. However, until now authentication remained a tricky part. But thanks to the WP API team, we now have the Authentication Broker, a centralized place where you can register applications for the REST API, and that will help you authenticate through a central and reliable server. You can read more about it in the announcement post, and register your apps at

10,000 members in WordPress’ Slack team

Are you a member of the Making WordPress Slack channel yet? You should join us, it’s become an important place to chat with other WordPress community members!

#news, #WordPress, #meetup

News in the WordPress world, February 2016

News in the WordPress world, February 2016

WordPress 4.5 Beta 1 is almost ready for testing

As always, the new release includes tons of bug fixes and new features. Here is a quick preview of some of the new features:

A few other Feature Plugins might still make it to 4.5, and are listed here.

Make sure to check the list, you might be interested in some features, like 2 Factor Authentication or the Fields API; you can test them by installing the plugins right from your dashboard.

WordPress REST API News: what should be in WordPress 4.5?

There was a lot of discussion about this in the past few weeks. The WP REST API just hit version 2.0, and while it’s still very much a work in progress, the team would like to merge the 4 first endpoints in WordPress 4.5:

  • posts
  • terms
  • comments
  • users

These endpoints are mostly ready, short of a few things to iron out, like password-protected posts, or sticky posts.

WordPress’ project lead, Matt Mullenweg, would rather wait until more endpoints are created, until the API supports everything you can do in wp-admin, and only then merge the endpoints into WordPress. While full parity isn’t necessarily his end goal, what he seems to be most interested in is releasing a product that is as much a “minimum viable product” as it is a “minimum lovable product”.

This has created some controversy, and it’s still not clear what will happen with the WP REST API in the next few weeks. The community seems divided between 3 different options:

  1. Will the 4 endpoints be merged into 4.5 as is?
  2. Will the 4 endpoints need to be polished and fully complete before to be merged?
  3. Will more endpoints have to created to reach a wp-admin parity before anything is merged?

You can read more about this here:

Do you use Woocommerce on sites with a very large inventory?

You probably know how hard it can be to maintain good performance and a good Search feature on large Woocommerce sites. Lucky for us, 10up just released ElasticPress WooCommerce, a free plugin in the plugin repository allowing you to run Woocommerce queries through Elasticsearch instead of your local database. All you need is a server running Elasticsearch, and the ElasticPress plugin (also free).

Critical Security Vulnerability Discovered in Elegant Themes Products

If you use an Elegant Themes product, be it a theme or a plugin, go update now!

An information disclosure vulnerability was found in the Divi Builder (included in our Divi and Extra themes, as well as our Divi Builder plugin) which resulted in the potential for user privilege escalation. If properly exploited, it could allow registered users, regardless of role, on your WordPress installation to perform a subset of actions within the Divi Builder, including the ability to manipulate posts.

#news, #WordPress, #meetup

News in the WordPress world, November 2015

News in the WordPress world, November 2015

WordPress 4.4 Release Candidate

Test, test, test! WordPress 4.4 should be released next week, on December 8, and you should be ready. Check this post to find out the new things that will ship with this new release.

WordPress now powers 25% of the web

Matt talked about it on his blog: WordPress now powers 25% of the web. It’s an important milestone. Let’s see what we can do to get to 100%! 😊

A more RESTful WP-CLI

Do you use WP-CLI? Daniel Bachhuber will work on making it fully compatible with the upcoming Core REST API. His Kickstarter campaign was a huge success and helped him get the funds he needed to concentrate on that project in the months to come.

A new CMS in Town, Envato Sites

Envato is one of the biggest businesses related to WordPress (they’re the company behind ThemeForest, CodeCanyon, and others). They announced that they’re working on a brand new site builder, named Envato Sites.

While they’ll continue to release tons of WordPress themes and plugins on ThemeForest and CodeCanyon, that’s definitely something to keep in mind. I can imagine that ThemeForest authors will start spending some time developing themes for that new CMS. If you work with Envato prodcuts, keep an eye on that.

Read the announcement here.

WordCamp US, WordCamp EU

WordCamp US starts on Friday. Even if you don’t travel there, you can purchase a Live Stream ticket if you’re interested in some of the talks. Matt’s State of the Word is always interesting, for example.

WordCamp EU will be in Vienna this year. It’s only a few hours by train or car, so definitely worth the trip. You can already book your tickets here.

A new desktop app, a new admin interface for, and it’s all open source

Automattic, the company behind and Jetpack, open sourced the code they use to run the new amdin interface on

  • It’s built with React and Node.js (more details about the implementation here and there).
  • It interacts with’s WordPress installation via the REST API.
  • The interface is fast, and a big change from wp-admin.
  • You can use that new interface if you own a site, or a self-hosted site where you’ve installed the Jetpack plugin (the plugin is used to communicate with the REST API).
  • The code is open source and available here.
  • A desktop app is available for Mac users, Linux and Windows versions are being tested.

While this is limited to site owners and Jetpack users for now, it’s a good example of what can be done when building a client on top of WordPress, using a REST API.

  • WordPress Core will soon include its own API, and we’ll probably see more clients popping up.
  • Once that API is mature, will be able to adapt its code to use the core REST API instead of the REST API.

Give the app a try, it’s a refreshing experience. It’s still limited in some cases, like when you’ve built things inside wp-admin using custom fields (not supported yet or custom post types (not supported yet).

Want to read more about it?

#news, #WordPress, #meetup

First WordPress Budapest Event (2014.11.18)

Thanks to all who participated in the meetup, and who took part of a very constructive discussion about putting the milestones of the Budapest community (here in the heart of Central and Eastern Europe). More meetups to be held soon with an expanding interest and a wide pool of ideas such as: workshops, presentations and beer or coffee catch ups. Be posted and see you at the next event 😉

Below some photos from the meetup:

#budapest, #community, #wordpress