The post InfiniteWP 2.17 | New Update appeared first on Orange Internet Solutions.

The post InfiniteWP 2.16.1 | New Update appeared first on Orange Internet Solutions.

WordPress 5.0.2 is now available. This is a maintenance release that addresses 73 bugs.

WordPress 5.0.2 Changelog

WordPress Blogs

A maintenance release that addresses 73 bugs. The primary focus of this release was performance improvements in the block editor: the cumulated performance gains make it 330% faster for a post with 200 blocks.

• @44339 – Posts, Post Types: Correctly show hierarchical post type hierarchy in … | desrosj
• @44337 – About: Add 5.0.2 details to the about page. Props desrosj. Fixes #45703. | pento
• @44323 – Default Themes: Bump the version numbers and release dates. Update … | laurelfulford
• @44290 – Post WordPress 5.0.2 RC2 version bump. | pento
• @44289 – WordPress 5.0.2 RC2 | pento
• @44288 – i18n: Remove the script_loader_src filter from … | pento
• @44287 – Block Editor: Upgrade @WordPress packages to the latest version … | gziolo
• @44284 – i18n: Prevent a PHP warning when a mu-plugin loads a textdomain. … | pento
• @44259 – Post WordPress 5.0.2 RC1 version bump. | pento
• @44258 – WordPress 5.0.2 RC1. | pento
• @44248 – Block Editor: Remove a deprecated notice being generated by the meta … | pento
• @44235 – Twenty Seventeen: Update font-family for Simplified Chinese (zh_CN). … | laurelfulford
• @44232 – I18N: Introduce load_script_translations() as a wrapper for loading … | ocean90
• @44231 – Script Loader: Pass the suffix to package style handles to ensure … | ocean90
• @44213 – Bundled Themes: Replace “Gutenberg” in code comments and classes. … | laurelfulford
• @44212 – Bundled Themes: Update default block appender selector. The markup … | laurelfulford
• @44211 – Script Loader: Misplaced parenthesis when wp-tinymce-lists is added. … | desrosj
• @44210 – Twenty Sixteen: Fix superscript and subscript. When using the … | desrosj
• @44209 – I18N: Fix JavaScript translations for subdirectory installations. … | herregroen
• @44208 – Scripts: Remove an incorrect parameter sent to … | pento
• @44206 – REST API: Remove a duplicate require_once(). In … | pento
• @44205 – Twenty Seventeen: Remove editor style that prevents images from being … | laurelfulford
• @44204 – Twenty Seventeen: Add focus style to cookies consent checkbox. To … | laurelfulford
• @44203 – Twenty Seventeen: Remove unnecessary ol styles from editor. Twenty … | laurelfulford
• @44202 – Twenty Nineteen: Fixes and improvements. This commit fixes the final … | desrosj
• @44201 – Twenty Nineteen: Fixes and improvements. This commit brings over … | desrosj
• @44200 – Twenty Sixteen: Fix button block custom colors on front end. … | laurelfulford
• @44199 – Twenty Nineteen: Fixes and improvements. This commit brings over … | desrosj
• @44198 – Twenty Fifteen: Fix button block custom colors on front end. … | laurelfulford
• @44197 – Twenty Fourteen: Fix button block custom colors on front end. … | laurelfulford
• @44196 – Twenty Nineteen: Fixes and improvements. This commit brings over … | desrosj
• @44195 – Twenty Thirteen: Fix button block custom colors. Simplify some of … | laurelfulford
• @44194 – Twenty Twelve: Fix button block custom colors. Simplify some of the … | laurelfulford
• @44193 – Updating Twenty Nineteen, the new default theme for 2019. This update … | allancole
• @44192 – Updating Twenty Nineteen, the new default theme for 2019. This change … | allancole
• @44191 – Twenty Eleven: Fix button block custom colors on front end. Simplify … | laurelfulford
• @44190 – Twenty Eleven: Correct block editor font-size issue. Update a … | laurelfulford
• @44189 – Updating Twenty Nineteen, the new default theme for 2019. This update … | allancole
• @44188 – Twenty Ten: Custom colors should override :visited link styles on … | laurelfulford
• @44187 – Updating Twenty Nineteen, the new default theme for 2019. This change … | allancole
• @44185 – PHP 7.3 Compatibility: Fix compact related notices. In PHP 7.3, the … | desrosj
• @44183 – Block Editor: Upgrade @wordpress packages to the latest version (4.7). … | youknowriad

Thank you to everyone who contributed to WordPress 5.0.2:

Alexander Babaev, Alex Kirk, allancole, Andrea Fercia, Andrew Ozz, Anton Timmermans, David Binovec, David Trower, Dominik Schilling, Eduardo Pittol, Gary Pendergast, Greg Raven, gziolo, herregroen, iCaleb, Jb Audras, Joen Asmussen, John Blackbourn, Jonathan Desrosiers, khleomix, kjellr, laurelfulford, Jeff Paul, mihaivalentin, Milan Dinić, Muntasir Mahmud, Pascal Birchler, Pratik K. Yadav, Riad Benguella, Rich Tabor, strategio, Subrata Sarkar, tmatsuur, TorontoDigits, Ulrich, Vaishali Panchal, volodymyrkolesnykov, Weston Ruter, Yui, ze3kr, and のむらけい.

WordPress More Information

The post WordPress 5.0.2 | Maintenance Release appeared first on Orange Internet Solutions.

WordPress 4.9.9 is now available. This is a security release.

WordPress 4.9.9 Changelog

WordPress | Blogs

• Karim El Ouerghemmi discovered that authors could alter meta data to delete files that they weren’t authorized to.
• Simon Scannell of RIPS Technologies discovered that authors could create posts of unauthorized post types with specially crafted input.
• Sam Thomas discovered that contributors could craft meta data in a way that resulted in PHP object injection.
• Tim Coen discovered that contributors could edit new comments from higher-privileged users, potentially leading to a cross-site scripting vulnerability.
• Tim Coen also discovered that specially crafted URL inputs could lead to a cross-site scripting vulnerability in some circumstances. WordPress itself was not affected, but plugins could be in some situations.
• Team Yoast discovered that the user activation screen could be indexed by search engines in some uncommon configurations, leading to exposure of email addresses, and in some rare cases, default generated passwords.
• Tim Coen and Slavco discovered that authors on Apache-hosted sites could upload specifically crafted files that bypass MIME verification, leading to a cross-site scripting vulnerability.

WordPress More Information

The post WordPress 4.9.9 | Security Release appeared first on Orange Internet Solutions.

WordPress 5.0.1 is now available. This is a security release.

WordPress 5.0.1 Changelog

WordPress Blogs

• Karim El Ouerghemmi discovered that authors could alter meta data to delete files that they weren’t authorized to.
• Simon Scannell of RIPS Technologies discovered that authors could create posts of unauthorized post types with specially crafted input.
• Sam Thomas discovered that contributors could craft meta data in a way that resulted in PHP object injection.
• Tim Coen discovered that contributors could edit new comments from higher-privileged users, potentially leading to a cross-site scripting vulnerability.
• Tim Coen also discovered that specially crafted URL inputs could lead to a cross-site scripting vulnerability in some circumstances. WordPress itself was not affected, but plugins could be in some situations.
• Team Yoast discovered that the user activation screen could be indexed by search engines in some uncommon configurations, leading to exposure of email addresses, and in some rare cases, default generated passwords.
• Tim Coen and Slavco discovered that authors on Apache-hosted sites could upload specifically crafted files that bypass MIME verification, leading to a cross-site scripting vulnerability.

WordPress More Information

The post WordPress 5.0.1 | Security Release appeared first on Orange Internet Solutions.