In a blog post, Matt Mullenweg, co-founder of WordPress and CEO of Automattic has alleged that WP Engine aims to control the WordPress experience. Sites from WordPress do not get hacked as often as they used to. This is due to WordPress working with hosts to stop ‘vulnerabilities at the network layer. Mullenweg continues by saying that the hosting provider will have to figure out a way to recreate WordPress’ security research by themselves. He also questions the logic of why WordPress has to give free services to WP Engine considering their attacks on WordPress.

The Automattic CEO says WP Engine can proceed with offering customers a bastardized version of WordPress’ GPL code. He ends the blog posts by emphasising that WP Engine is not WordPress.

As WordPress.org blocks WP Engine, loads of WP Engine users have taken to social media to voice their concerns. WP Engine customers have been left vulnerable due to the absence of security updates. The hosting provider has acknowledged this issue and ensured its customers that there is currently no impact regarding security, performance and other concerns. WP Engine has responded to Mullenweg’s claims stating that the Automaacttic CEO interfered with operations within WP Engine.

WordPress.org Blocks WP Engine: Background on this feud

Earlier this week, Mullenweg criticised WP Engine at the WordCamp US 2024 event. After his comments at the event, he later went on to publish a blog post with even more scathing comments. Mullenweg claimed that WP Engine profited off WordPress since 2010 and disabled most of the features that made WordPress what it is.

In his blog post, Mullenweg also called WP Engine a ‘cancer’ to WordPress. Mullenweg stated that WP Engine turned off the revision system. Furthermore, the hosting service has also been alleged to profit from the confusion that exists between WordPress and WP Engine. Mullegnweg has stressed over and over that WordPress is not affiliated with WP Engine by any means.

Suggested:

Matt Mullenweg Critizes WP Engine at WordCamp US 2024.

WordPress 6.7 Update: Final 2024 WordPress Update.

The post WordPress.org Blocks WP Engine appeared first on Tricky Enough.

The maintenance release was led by members, Vicente Canales and Tonya Mork and mentorship from Aaron Jorbin. This new WordPress update fixes 15 issues in Core such as CSS specificity changes for specific themes. It was found that implementing CSS came with some problems that changed the look of a web page. 

CSS refers to the code that determines the look of a web page. It has to do with spaces, colours, sizes and the like. Adding on to this, CSS Specificity refers to rules from WordPress’ Core that decide the CSS properties to be applied particularly when there is a sense of vagueness or doubt on which properties should be applied. 

WordPress 6.6.2: More Fixes From This Maintenance Update

Some more fixes in Core include the Site Health Tool properly loading directory sizes. There was a bug which removed content from the templates when the templates were removed. The new WordPress 6.6.2 update has thus fixed this issue. Issues regarding text-wrapping issues from the About page have also been fixed in this release. 

Furthermore, this update fixes around 11 Block Editor issues, The Post Editor has been improved upon this the 6.6.2 update. Pseudo-element selectors have also been fixed in the custom block CSS. Duplication of template parts in non-block-themes has also been prevented. In the Data Views section, the action modal will not be rendered in the absence of eligible items. 

Suggested:

WordPress 6.7 Update: Final 2024 WordPress Update.

WordPress Tracks Down XSS Vulnerability- Users To Update To 6.5.2.

The post WordPress 6.6.2 Maintenance Release Fixes 26 Bug Issues appeared first on Tricky Enough.

Automattic has announced that Tumblr blogs will be moving all of its blogs to the WordPress backend. Tumblr will slowly be migrating over half a billion blogs over to WordPress which is a tricky and lengthy process but doable.

In an official blog post, Automattic has put out official statements clarifying Tumblr’s migration. Tumblr is stated to remain the same as it used to be. Users will not notice a difference on the outside. However, the backend operation will be transferred over to WordPress. There will be changes in terms of internal operations.

This transfer of Tumblr blogs to WordPress is expected to make it easier for blogs to be shared across platforms. Tumblr will be run on a solid infrastructure backed by WordPress and it will thus benefit from an open-source project such as WordPress. Furthermore, the blog post also stated that WordPress would also benefit from this transfer. WordPress will have the advantage of Tumblr’s tools and creativity that the teams invest in the site.

Tumblr Blogs After Automattic Acquisition in 2019

Automattic is the parent company of both Tumblr and WordPress. The company acquired Tumblr back in 2019 for only $3 million. This acquisition came six years after Yahoo acquired Tumblr for $1.1 billion which is a drastic amount compared to the $3 million that Automattic spent on buying Tumblr. However, Automattic’s CEO, Matt Mullenweg believed that Tumblr’s future still had promise. Since Automattic acquired Tumblr, the company has worked towards improving the blogging site and bringing Tumblr back to its glory days.

However, even with Mullenweg’s optimistic outlook, Tumblr kept losing money at a whopping $30 million yearly. Due to Tumblr’s losses, Mullenweg had to transfer most of Tumblr’s teams to Automattic in 2023. Additionally, Tumblr employees had also been laid off. Tumblr continues to generate revenue through ads, subscriptions and other digital services.

Suggested:

WordPress Superhero Challenge Opened by Wordfence.

WordPress Tracks Down XSS Vulnerability- Users To Update To 6.5.2.

The post Tumblr Blogs Are Moving To WordPress appeared first on Tricky Enough.

Automattic, WordPress’ parent company has stated that it would sponsor approximately five members from the Release Squad. This sponsorship excludes Matt Mullenweg who is the current CEO of Automattic. Hector Prieto, one of the beneficiaries has maintained that Release Squad is carefully working with the Release Coordination and Marcomms role combination. However, he states that this might be reversed depending on the feedback they receive.

WordPress 6.7: Default Theme Twenty Twenty-Five

WordPress 6.7 will have a default theme which will be called the Twenty Twenty-Five. The default theme has been developed with the principle that simple things are meant to be intuitive and complex things are meant to be possible. This principle came from Matt Mullenweg, who described the eleven principles for WordPress development.

Twenty Twenty-Five represents the optimum level of adaptability and flexibility. The new default aims to deliver different ways and means by which WordPress lets users write their stories by choosing between different design elements.

There are various kinds of patterns, styles and templates for users to choose from. The new update offers users fonts with multilingual support to appease a global user base. It also features a diverse set of colour palettes. The new default theme will also feature an array of templates for users. As with the previous update, WordPress 6.7 is compatible with Site Editor and utilises new design tools such as Pattern Styles and Grid Block.

Beatriz Fialho led the design team for the WordPress 6.7 update. Furthermore, Juanfra Aldasoro and Carolina Nymark led the WordPress 6.7 development team.

Suggested:

WordPress 6.6.1: New Maintenance Release for WordPress 6.6.

WordPress 6.6 ‘Dorsey’ Update and its Features

The post WordPress 6.7 Update: Final 2024 WordPress Update appeared first on Tricky Enough.

A supply chain attack is a cyberattack in which the software or part of it is modified to contain harmful code. Thus, the software unintentionally acts as the carrier of the harmful code. 

In this case, Hackers have been attacking WordPress plugins to steal account information such as password credentials from developer accounts. After stealing the credentials, hackers are allowed access to the plugin codes that they are about to alter. Harmful/malicious codes are then added to the plugins, making the website a carrier of the altered code. 

Wordfence has also announced more plugins have been altered and it seems that the attack on WordPress will continue. More plugins will thus be compromised. 

WordPress Plugins Attacked 

The first group of attacked plugins are Wrapper Link Element, Social Warfare, Simply Show Hooks, Blaze Widget, and Contact Form 7 Multi-Step Addon.

The new group of compromised plugins are PowerPress Podcasting, WP Server Health Stats, Ad Invalid Click Protector, and Latest Infection – Seo Optimized Images.

Suggested:

WordPress has made a Free Course on Creating and Monetizing Membership Websites Available.

WordPress Now Offers A Content Generator Powered By OpenAI, With Free Access.

The post WordPress Plugins Under Attack by Hackers appeared first on Tricky Enough.