From across Automattic.
Updates from all of Automattic’s business units.
-
How to Choose a CDN for Your WordPress Site
A CDN improves your site’s performance, but it’s important to choose the best one! Consider factors like ease of use, performance and reliability. Here’s how.
-
How to Create a Welcome Email Campaign for Your WordPress Website
Learn how to set up a welcome email series for your WordPress.com website.
-
Heading Font Weights and List View Toggles Arrive in Block Editor and WordPress 5.8
With the WordPress 5.8 release, we're starting to introduce features that overall improve your visual editing experience.
-
.blog Featured Site: micro.blog
Micro.blog creates an easy way for microbloggers to share and connect. It's also the perfect example of the benefits of using a premium domain name. Micro.blog clearly communicates exactly what the website is—a space for microblogging. It's a highly intuitive URL.
-
The Second Annual, Official WordPress.com Growth Summit is Coming and You Won’t Want to Miss It
Join us online August 17 (Americas) or August 18 (Asia-Pacific). Register today!
-
The Ultimate Guide to Migrating from Webflow to WordPress
Migrating from Webflow to WordPress can be daunting if you’ve never done it before. Here’s how to do it the right way.
-
Five Reasons Your Blog Needs a WordPress Search Plugin
Keep users on your site longer, provide a better experience, grow your following, and make more money! See 5 reasons your blog can't wait for a WordPress search plugin.
-
Make Your Best Photos Shine
Photos on your website can be a representation of who you are, what you do, or what you love. We want your photos to show to your visitors as best they possibly can, no matter what kind of device they are using.
-
Severe Vulnerability Patched In WooCommerce Currency Switcher
During an internal audit of the woocommerce-currency-switcher plugin, we uncovered a very severe local file inclusion vulnerability. This security flaw could enable attackers to leak sensitive information like database credentials, cryptographic keys, and may allow arbitrary code execution in some instances. We reported the vulnerabilities to the WOOCS team via email last week, and they released version 1.3.7 to fix this issue. If you are using an older version of this plugin, we encourage you to update immediately.
-
How to Pick the Right Premium Name
A premium domain ensures that your business has a name that can help drive success and brand recognition with your customer base. There are so many premium domain names available to use so it’s important for you to know how to find the best domain name for you.
-
Episode 28: Erica Pandey of Axios on Returning to Work
Whether making their start as a solo blogger on their own beat, or growing up in a thriving newsroom, journalists must forge their own unique work life as they write the first draft of history, as Matt says in the latest Distributed podcast episode with Erica Pandey, business journalist and writer of the What’s Next newsletter at Axios. This fast-paced conversation covers a lot of ground, from Erica’s own journalism career, to how she works with her Axios colleagues across bureaus. She balances Axios’ Smart Brevity style with authoritative reporting on complex topics, seeking multiples perspectives, from data to experts to people on the ground. Says Erica, “One of my greatest joys is being able to talk to people.” The lively conversation centers on how we’re all returning to work after so much change and adaptation, including the rise of hybrid workplaces.
-
Finding the Best WordPress Speed Plugin: 6 Plugins and 6,000 Real Websites Tested
Looking for the best plugin to speed up WordPress? We tested the top six WordPress speed plugins to find the best.
-
How to Speed Up Your WordPress Site With WebP Images
Learn how to use faster loading WebP images on your WordPress site.
-
Two Vulnerabilities Fixed in Super Progressive Web Apps WordPress Plugin
The WPScan WordPress security research team identified two serious vulnerabilities affecting the Super Progressive Web Apps WordPress plugin, affecting over 50,000+ WordPress websites. Our users were warned about these vulnerabilities on June 29th, 2021 when they were added to our database. Authenticated (subscriber+) Arbitrary File Upload to RCE Description When the plugin’s Apple Touch Icons…
-
WordPress.com Onboarding: Better Iteration Through Persistence, Collaboration, and Data Analysis
How a year of experiments led to subtle changes with major impacts.
-
13 of the Best WordPress Booking Plugins to Automate Appointments
We’ve researched and analyzed each and every WordPress booking plugin to bring you the ones with the best features. Here’s all you need to find the best solution for you.
-
WordPress.com Managed Hosting Webinar with Rudy Faile, Automattic Systems
Learn how WordPress.com's managed hosting powers fast, secure websites.
-
Why Admin XSS Is a Valid Security Issue
By default, WordPress allows administrator and editor users to inject JavaScript into pages, posts, comments and widgets. This is because administrator and editor users have the unfiltered_html capability. Here at WPScan it is quite common to receive vulnerability reports via our submission form where the security researcher was not aware that administrator and editor users…
-
Do You Need to Use SEO Plugins on Your WordPress.com Site?
Discover the SEO benefits that WordPress.com delivers and how to improve SEO for your site.
-
Coding Mistake Leads to CSRF Bypass in 200,000+ WordPress Websites
In March, the WPScan WordPress security research team discovered Cross-Site Request Forgery (CSRF) protection bypasses in 37 WordPress plugins, affecting over 200,000+ active WordPress websites. The vulnerabilities were responsibly disclosed, resulting in the 37 plugins either being patched or removed from the official WordPress plugin repository. Cross-Site Request Forgery (CSRF) is a vulnerability that can…
-
The Ultimate WordPress Site Migration Checklist
Ready to migrate? Make sure everything works perfectly — follow this handy migration checklist for a smooth process. Plus, see the top tool that makes it easy.
-
Popular Podcast App Pocket Casts Joins Automattic
Pocket Casts will be joining Automattic, making it easier for podcast fans to discover new content and customize their listening experience.
-
Critical WooCommerce Vulnerabilities
On July 13th two critical SQL Injection vulnerabilities were reported and patched in the WooCommerce and WooCommerce Blocks WordPress plugins. SQL Injection vulnerabilities allow attackers to ‘piggyback’ on SQL queries, usually allowing the attacker to read, write and edit database data. Although SQL Injection vulnerabilities can sometimes be difficult to exploit manually, tools such as…
-
6 Ways WordPress.com Courses Help You Grow
Join our WordPress.com Course Communities to help you get started on your blog or podcast.
-
How to Create an Events Calendar in WordPress
Learn how to set up a professional events calendar on your WordPress site using a plugin.
-
My Blog Post Disappeared! Where Did It Go?
Can’t find your blog post? Don’t worry! WordPress has your back. From searching your site to locating a backup, learn how to recover your blog post fast!
-
Resources for block theme development
With WordPress 5.8 launching on July 20th, it seems like a great time to round up some resources to help theme authors prepare for the future. By now, you’ve probably heard about block themes and the upcoming future of full site editing. Perhaps you have even begun to explore creating a block theme or adapting…
-
Build a Blogging Habit with Reminders in Your WordPress App
Meet your posting goals on your site with this new feature in the iOS and Android apps.
-
Behind the Scenes of Jetpack Search: An Exclusive Interview
One of the most impactful innovations in recent years, Jetpack Search makes the WordPress experience better for everyone. Meet the team behind the code.
-
How To Create A Multilingual WordPress Website
Step by step guide to using a plugin to create a multilingual WordPress website
-
.blog Featured Site: mgs.blog
Here is a great example of a blogger with a short, memorable, and easy to type premium domain. The domain represents the blogger’s initials. An influential leader in the tech space, mgs.blog has chosen to aggregate writing, thoughts, and content with a .blog domain.
-
-
Returning to the Office
“The way that we run our company – which is very asynchronous, people in timezones all over the world – written communication is very important. We maybe over index in our hiring process for people who are really clear writers, which I think sort of begets clear thinking,” said Matt Mullenweg, when asked about managing…
-
Multiple vulnerabilities in Workreap theme by Amentotech
Recently the Jetpack team found some infected files in one of our hosted customers' sites, and quickly traced the source of infection back to the Workreap theme by Amentotech. We started an investigation and uncovered a number of vulnerable AJAX endpoints in the theme; the most severe of these was an unauthenticated unvalidated upload vulnerability potentially leading to remote code execution and a full site takeover.
-
5 Ways a Site Benefits from a Premium Domain Name
A vital part of a site’s branding is the domain name. It can impact a website’s ability to stand out. When competition is fierce, creating the right first impression is crucial for attracting visitors and setting a site apart; this is where a premium domain comes in.
-
Jetpack 9.9: Make your best photos shine
With Jetpack 9.9, we make it easier to highlight your photography in a gorgeous full-screen carousel. We optimized performance and usability, particularly when swiping and zooming on mobile devices.
-
Why Great Web Design Matters
First impressions matter. Leverage design expertise to ensure that potential customers successfully find what they are looking for on your website.
-
Fake Plugin Alert: WordPress Plugin and User Backup Tool
Attackers are abusing compromised accounts to install a fake WordPress plugin called: WordPress Plugin and user backup Tool.
Automattic 