From across Automattic.
Updates from all of Automattic’s business units.
-
Expanded Button Formatting, New Spacing Controls, and Drag-and-Drop for List View Now in Block Editor
This month, our team released features in the block editor that give your site a little breathing room: spacing controls for buttons and paragraphs. And the List View tool keeps getting better with drag-and-drop. Powerful Expanded Button Formatting Buttons never looked so good with custom padding. Padding is empty space within the border of a…
-
Malware using the REST API for Remote Code Execution
In this post we cover an example of a malware using the REST API to allow bad actors to run remote code on the server.
-
Join us at Tumblr!
During an interview, a candidate recently asked me why, after more than five years, I still work at Automattic. Why? I like the people I work with, and they alone are a good reason to stay. Being globally distributed means I get to work with colleagues from various backgrounds. This helps me understand first-hand what’s…
-
Ecommerce Plugins for WordPress: 16 Tools for WooCommerce Stores
Start selling online! From design to speed, security to marketing — see the top plugins that WordPress professionals use to create winning eCommerce sites.
-
What is Attack Surface Mapping?
Bit Discovery have been using the WPScan WordPress security scanner and the WPScan Enterprise API for some time to add WordPress scanning functionality to their offering. We thought that it would be a good idea to introduce our readers to what Attack Surface Mapping is, and how organisations can benefit from it. To do this,…
-
.blog Featured Site: omnitalk.blog
Run by two experienced retail industry professionals, omnitalk.blog is a fast-growing retail blog. Like popular blogs, HuffPost and TechCrunch, this blog is a news publication. The founders describe it as “the retail blog for retailers, written by retailers".
-
How to Build a Shop Page with WooCommerce + Gutenberg
Get step by step instructions to build an online shop page using WooCommerce and Gutenberg.
-
Matt Mullenweg On Finding Talent: From Cheddar News
"If you're a business for whom talent is a key differentiator," said Automattic CEO Matt Mullenweg this week on Cheddar News' Closing Bell, "then I would highly recommend you learning how to evolve your business to be fully inclusive of remote people."
-
The Who, What, Where & How of .blog and Blogging
As the internet continues to transform, the market for .blog domains continues to grow. The following infographics show how blogging is growing across the board. This data was put together with the help of our friends at Pandalytics, and is supported by our own .blog data.
-
WordPress Plugins for Restaurants: Which Are Important?
Greet more hungry diners with the perfect WordPress site. Get it right from the start with this carefully curated list of top restaurant plugins for WordPress.
-
Meet the Customers We're Featuring at the WordPress.com Growth Summit
We are proud to feature Jessica Petrie of Yoga Next Door, HBCU Gameday, and other inspiring customers at the second Official WordPress.com Growth Summit, on Tuesday, August 17.
-
Meet the Skateboarding Nomad Living the Open Source Life
He’s not sanctioned, not approved, and nobody has more on the line. We finally tracked down the skateboarding nomad responsible for a stunning #WordPress grassroots effort.
-
2021 Mid-Year WordPress Security Report: A Collaboration Between Wordfence and WPScan
WPScan has collaborated with Wordfence to conduct a 2021 mid-year review on the state of WordPress security. Using vulnerability data from WPScan’s WordPress vulnerability database and attack data from Wordfence’s internal threat intelligence platform, we were able to analyze the current trend of attacks on WordPress and assess the current state of WordPress-based software security. …
-
Building an Editor by Sharing Code Between Android, iOS, and Web with React Native
When WordPress began rolling out the powerful new Gutenberg editor for building web pages (and, soon, entire websites), we were excited to bring that power to our users on mobile. Why React Native We know firsthand how hard it is to make a great editor. We have built native editors for Android and iOS before…
-
Automatically Deploy to WordPress.com Using GitHub Actions
WordPress.com provides you with a great experience out-of-the-box, from superb SEO to social media sharing, custom web fonts, and so much more. At WordPress.com, we also cover very advanced needs, such as connecting GitHub to sites on a Business or eCommerce plan. This allows you to automate deployment using GitHub Actions, which can become a…
-
Faster, More Flexible Editing of Your Sidebars, Headers, and Footers: Blocks for Widgets
Great news: the block editor you’re familiar with in pages and posts is now part of the widgets editor.
-
.blog Featured Site: comefromaway.blog
After being stuck close to home for over a year, something is refreshing about hearing of far-off destinations and travel. Our next featured dotblogger is comefromaway.blog, sharing the personal experiences of a family who took the opportunity to move to Chile.
-
Why Submit Vulnerabilities to WPScan
There are many reasons to submit WordPress core, plugin vulnerabilities and theme vulnerabilities to the WPScan WordPress vulnerability database. We’ve listed just a few below! 1. Responsible Disclosure Our team will help you with the vulnerability responsible disclosure process. Submit the vulnerability details to us and we will ensure that the vulnerability is handled properly….
-
Should You Migrate Your WordPress Website?
It’s not a decision you should take lightly. Is it really time to move? See the ten most common reasons and the secret to making the transition stress-free.
-
How to Split a Blog Post Into Multiple Pages (And 3 Methods)
Learn how to split long blog posts into multiple pages (and why you should) in three simple ways!
-
ExPlat’s Development Principles and Practices
When we started working on Automattic’s new experimentation platform (ExPlat), it became clear that we needed to agree on the development practices for the project. Achieving consensus was critical, given Automattic’s fractal nature and its strong emphasis on autonomy. In practice, these attributes lead to a high variability of project development cultures across the company, depending…
-
Arbitrary Role Change/Privilege Escalation in HM Multiple Roles WordPress plugin
While investigating a security advisory about an arbitrary role change/privilege escalation issue in the HM Multiple Roles WordPress plugin, the Jetpack Scan team discovered that the fix was incomplete and left the plugin still vulnerable. The issue is fully fixed in version 1.3 of the plugin, and we advise any sites using any earlier version of this plugin to update as soon as possible.
-
WordPress Security Plugins: Which One Should I Choose?
From pricing and reliability to features to ease of use, the expert developers behind WordPress.com break down the best WordPress security plugins available.
-
Blogging Awards: Highlights from Around the Web
There are many reasons bloggers seek out or receive awards; they can help grow your following, give recognition to hard work, and increase your visibility. Some awards even offer prizes! Some companies will feature your blog on their website or in their publication.
-
Jetpack 10.0 – Behind-the-scenes improvements for your site
To celebrate our 10th birthday earlier this year, we launched Jetpack Turns 10, a microsite to highlight how Jetpack has helped millions of people speed up and secure their WordPress sites. In this release, we have shipped several under-the-hood improvements for an enhanced Jetpack experience.
-
5 Ways to Get Started On Your Side Hustle
We’re committed to helping you create a professional online presence with WordPress.com, and we’re launching a three-month free trial with Professional Email to get you started. Professional Email is an industry-leading email service from our partner Titan that’s powerful and easy to set up. Professional Email helps you build your brand online with a custom email address at your domain.
-
-
WordPress Vulnerability Statistics for July 2021
In this blog post we are going to look at the vulnerabilities added to the WPScan WordPress Vulnerability Database in July 2021. The vulnerabilities were all hand curated and added to our database by WordPress security experts. The vulnerabilities come from independent security researchers from the security community who submit them to us via our…
Automattic 