WordPress Plugin XSS Vulnerability

Issue: A serious XSS security vulnerability was discovered and disclosed this morning that affects hundreds of WordPress plugins, which in turn affects millions of websites. Status: Anyone who manages or maintains a WordPress site is strongly urged to update ALL plugins immediately. Who is impacted? People running WordPress websites with the following plugins: Jetpack WordPress Read More >

Security Alert – 4/14/15 – BuddyPress Plugin for WordPress

Issue: BuddyPress has released a security update (version 2.2.2). They are recommending to update to this latest version. Status: Update has been released. Who is impacted? Websites running the WP REST API Plugin for WordPress. Why was this update released? BuddyPress version 2.2.2 was released to address two potential security issues and has a few Read More >

Creating a Page or Post in WordPress

When using WordPress, you’ll be working with Pages and Posts very often. For a photographer, you’ll generally want to use a page for your galleries or portfolio. If you want to highlight a specific image or have a set of images that you’ll continually update, a post may be better. There are more differences. Posts Read More >

How to Install WordPress Manually

The easiest way to install WordPress is to use the WordPress Softaculous installation. This is available if you are an InMotion Hosting customer. If you are not, you must perform a manual installation. The following tutorial will walk you through a manual installation of WordPress. Create the Database Before we begin the installation of WordPress Read More >

Remove Comments from a WordPress Page or Post

WordPress was built for interaction with people in mind. All pages and posts can allow discussion in the form of comments. However, there are circumstances when comments are not welcome on a post. For example, the post may simply be an announcement or shared information. The WordPress interface does allow for the comment option to Read More >

Creating a Static Page in WordPress

A website that is used for displaying your photos will have pages that consist primarily of text and images. WordPress calls these pages, static pages. While all pages and posts within WordPress have the option to allow user interaction, static pages can be created with the option for user interactivity removed. The following tutorial will Read More >

Editing your WordPress wp-config.php file

If you need to make changes to your WordPress installation, such as the site URL, database name, or many other things, you would typically do so within your wp-config.php file. If you are not familiar with the wp-config.php file, it defines the basic configuration of your WordPress site. Think of it as the basic blueprint that WordPress operates on. Read More >

Integrating Elasticsearch with WordPress using ElasticPress

If you’ve ever used Elasticsearch for managing your searchable content, you know that it is incredibly fast and scalable. If you’re a WordPress user, you likely also know that obtaining WP_Query objects can sometimes have a negaitve impact on your resource usage if you have a large database of center to search from. Thankfully, 10up Read More >

WordPress Critical Security Announcement

As of today, several vulnerabilities were discovered and patched within WordPress. The most critical of these is a cross-site scripting vulnerability which allows malicious comments to be left, and when seen, can execute unauthorized code as the administrator user in versions 3.0-3.9.2. Although 4.0 is not affected by this particular vulnerability, several other vulnerabilities were Read More >

Banning known hack sources from your WordPress site

Preventing malicious attacks before they are even attempted is often one of the best defenses against your website becoming hacked. Of course, there is no replacement for a securely developed site, but a large majority of attacks can be blocked by simply banning malicious sources from your WordPress site. In this article, we will show Read More >