WPBeginner » News http://www.wpbeginner.com Beginner's Guide for WordPress Mon, 22 Jun 2015 03:24:29 +0000 en-US hourly 1 http://wordpress.org/?v=4.2.2 WPBeginner Exclusive – Bluehost $2.95 / month + Free Domain (Limited Time Deal) http://www.wpbeginner.com/news/wpbeginner-exclusive-bluehost-2-95-month-free-domain-limited-time-deal/ http://www.wpbeginner.com/news/wpbeginner-exclusive-bluehost-2-95-month-free-domain-limited-time-deal/#comments Sat, 06 Jun 2015 18:30:26 +0000 http://www.wpbeginner.com/?p=26402 Looking to start a new blog, switch hosting providers, or transfer from WordPress.com? Let us make it easy for you. Our friends over at Bluehost has agreed to offer all WPBeginner users a limited time deal: 60% discount and a free domain name. This super… Read More »

To leave a comment please visit WPBeginner Exclusive – Bluehost $2.95 / month + Free Domain (Limited Time Deal) on WPBeginner.

]]>
Looking to start a new blog, switch hosting providers, or transfer from WordPress.com? Let us make it easy for you. Our friends over at Bluehost has agreed to offer all WPBeginner users a limited time deal: 60% discount and a free domain name.

Bluehost 2.95 Special

This super exclusive offer expires on June 30th and is only being offered through WPBeginner and four of their top partners.

You can start your blog for as low as $2.95 / month which is their lowest price ever → Claim this Offer ←

Why Bluehost? Because they are an official WordPress recommended hosting provider.

Bluehost is one of the oldest web hosting companies on the web (started in 1996 – older than Google). They are the largest brand name in WordPress hosting and host millions of websites including several of our own.

Full Disclosure: When you purchase using our referral link, at no additional cost to you, we will receive a small commission. We would get this referral fee for recommending just about any other company, but we only recommend products that we personally use and/or believe will add value to our readers.

Who is this offer great for?

Well everyone, but in particular: those starting a new blog or switching from WordPress.com to a self-hosted WordPress.org blog.

We have written a full article on WordPress.com vs WordPress.org, but here’s the summary of why you should use self-hosted WordPress:

  • You get a free domain name (only if you go with Bluehost)
  • You have access to more themes and design customization options.
  • You can install plugins.
  • You can run your own ads without any restrictions.
  • You can create your own store.
  • You own and control your content (whereas on WordPress.com you are restricted to their Terms of Service, and they often show ads to your users unless you pay them not to).

Not convinced yet?

Bonus offer: Our expert team will help you get started. Bluehost promised us that if you signup using our referral link, then they will compensate us to do the blog setup for you. We will even migrate your WordPress.com blog over to self-hosted WordPress. Here’s how to claim this offer:

1. Signup using our referral link

2. Fill out the form on this page and that’s it!

Who Shouldn’t Use this Offer?

This offer is not good for everyone. Our goal at WPBeginner is to guide the users to make the best decision regardless of whether we get paid or not.

The biggest catch here is the term “unlimited space and bandwidth”, and we want to explain that.

The way these shared hosting companies are able to offer such affordable prices is by allowing multiple users to share a large server. By having multiple sites on the same server, it allows them to reduce costs for everyone.

Think of the savings as riding a bus vs your own car.

Having that said, there is no such thing as unlimited. While it says unlimited, you still have usage restrictions. If your site starts to take up substantial server load, then they will politely force you to upgrade. If they don’t take this action, then it has negative effects on the overall performance of every other site sharing the same server.

As conventional wisdom goes, your overhead costs will grow with your business!

If your website is getting millions of pageviews per month, then this $2.95 hosting plan won’t work for you. You should look into getting a VPS or even managed WordPress hosting.

However if you are just starting out or have a small business website, then there is no reason for you to pay hundreds of dollars each month for resources you won’t use. You should absolutely definitely take advantage of this shared hosting offer.

→ Signup with Bluehost Now ← – Lowest prices ever + a free domain name.

To leave a comment please visit WPBeginner Exclusive – Bluehost $2.95 / month + Free Domain (Limited Time Deal) on WPBeginner.

]]>
http://www.wpbeginner.com/news/wpbeginner-exclusive-bluehost-2-95-month-free-domain-limited-time-deal/feed/ 20
WordPress 4.2.1 – Security Release Fixes Zero Day XSS Vulnerability – Update Now http://www.wpbeginner.com/news/wordpress-4-2-1-security-release-fixes-zero-day-xss-vulnerability-update-now/ http://www.wpbeginner.com/news/wordpress-4-2-1-security-release-fixes-zero-day-xss-vulnerability-update-now/#comments Mon, 27 Apr 2015 18:49:43 +0000 http://www.wpbeginner.com/?p=27624 Just 3 days after the release of WordPress 4.2, a security researcher found a Zero day XSS Vulnerability that affects WordPress 4.2, 4.1.2, 4.1.1, 4.1.3, and 3.9.3. This allows an attacker to inject JavaScript into comments and hack your site. WordPress team responded fast and… Read More »

To leave a comment please visit WordPress 4.2.1 – Security Release Fixes Zero Day XSS Vulnerability – Update Now on WPBeginner.

]]>
Just 3 days after the release of WordPress 4.2, a security researcher found a Zero day XSS Vulnerability that affects WordPress 4.2, 4.1.2, 4.1.1, 4.1.3, and 3.9.3. This allows an attacker to inject JavaScript into comments and hack your site. WordPress team responded fast and fixed the security issue in WordPress 4.2.1, and we strongly recommend that you update your sites immediately.

WordPress XSS Security

Jouko Pynnönen, a security researcher at Klikki Oy, who reported the issue described it as:

If triggered by a logged-in administrator, under default settings the attacker can leverage the vulnerability to execute arbitrary code on the server via the plugin and theme editors.

Alternatively the attacker could change the administrator’s password, create new administrator accounts, or do whatever else the currently logged-in administrator can do on the target system.

This particular vulnerability is similar to the one reported by Cedric Van Bockhaven which was patched in the WordPress 4.1.2 security release.

Unfortunately, they did not use proper security disclosure and instead posted the exploit publicly on their site. This means that those who do not upgrade their site will be in serious risks.

Update: We have learned, that they tried contacting WordPress security team but failed to get a timely response.

If you haven’t disabled automatic updates, then your site will automatically update.

Once again, we strongly advise that you update your site to WordPress 4.2.1. Make sure to backup your site before you update.

To leave a comment please visit WordPress 4.2.1 – Security Release Fixes Zero Day XSS Vulnerability – Update Now on WPBeginner.

]]>
http://www.wpbeginner.com/news/wordpress-4-2-1-security-release-fixes-zero-day-xss-vulnerability-update-now/feed/ 15
What’s New in WordPress 4.2 http://www.wpbeginner.com/news/whats-new-in-wordpress-4-2/ http://www.wpbeginner.com/news/whats-new-in-wordpress-4-2/#comments Thu, 23 Apr 2015 19:17:41 +0000 http://www.wpbeginner.com/?p=27489 WordPress 4.2 was released just a few minutes ago. This is the first major WordPress release of 2015. It fixes many issues and adds some great new features to WordPress. Sadly, some really cool features were dropped because they were not yet ready to be… Read More »

To leave a comment please visit What’s New in WordPress 4.2 on WPBeginner.

]]>
WordPress 4.2 was released just a few minutes ago. This is the first major WordPress release of 2015. It fixes many issues and adds some great new features to WordPress. Sadly, some really cool features were dropped because they were not yet ready to be shipped. In this article, we will show you what’s new in WordPress 4.2 and which features you should try after updating your sites.

WordPress 4.2 Features

This is a major WordPress release, which means your site will not get automatically updated unless you are using managed WordPress hosting. You will have to initiate the update from your WordPress dashboard. As always, don’t forget to backup your WordPress site before updating.

New and Improved Press This Tool

WordPress 4.2 comes with the new and improved Press This tool.

Installing Press This tool for WordPress

It is a simple bookmarklet that you can drag and drop to your browser’s bookmarks bar or add to your mobile homescreen. This allows you to easily share any content from anywhere on the web to your WordPress site with a simple click or tap.

Using Press This tool on your mobile phones

Press This will now automatically find images, excerpt, and title for the content you are sharing and embed it to a post on the fly. This will make sharing content a lot faster and easier for many users.

New Characters & Emoji Support in WordPress 4.2

Emoji are natively available on all modern devices including mobile phones. WordPress didn’t support emoji natively. WordPress 4.2 resolved this by adding the native support for emoji. You can now use emojis anywhere on your WordPress site.

Using Emojis on a WordPress site from a mobile phone

The support for Emoji was made possible by the underlying work done to add native support for Chinese, Japanese, Korean characters. WordPress 4.2 will automatically switch your utf-8 database to utf8mb4. This change will also allow musical and mathematical symbols and even hieroglyphs.

While many users may not be as excited about Emoji support, the support for more language characters is a huge improvement for a very large global WordPress user base.

Faster Plugin Updates

Plugin updates required you to click on the update link and wait for a page to load which showed update progress. Then after the update you were able to move on to do whatever you were doing. This will change in WordPress 4.2 which now comes with a faster one-click plugin updates.

Faster plugin updates in WordPress 4.2

Earlier in our What’s coming in WordPress 4.2 article, we showed you faster plugin install feature. It was similar to the update feature but allowed users to install plugins without reloading page. This feature was dropped during the beta.

More Auto Embeds

Just like YouTube videos, Tweets, and many other services, Tumblr and Kickstarter are now included into oEmbed whitelist in WordPress. You can now paste a link from Tumblr or Kickstarter and see it automatically embedded into the post.

Tumblr auto embed in WordPress

Theme Switching in Customizer

WordPress 4.2 comes with some great improvements in the customizer. You can now switch themes directly from theme customizer and make changes. This will enable users to quickly preview themes and customize themes without even activating them.

Theme Switching in WordPress 4.2

Under The Hood Changes

Messages generated by JavaScript calls to the server will now be readable by screen-readers. Plugin authors and developers can use wp.a11y.speak() to send audible notifications.

Terms shared by multiple taxonomies will now be split when one of them is updated.

Complex ordering support with meta query clauses is now supported by WP_Query, WP_Comment_Query, and WP_User_Query.

There are some minor changes in the default WordPress color scheme.

There are many bug fixes and other under the hood improvements. You can see a full list of changes here.

We hope you liked this overview of what’s new in WordPress 4.2. We are particularly excited about faster plugin update feature. What are you excited about?

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

To leave a comment please visit What’s New in WordPress 4.2 on WPBeginner.

]]>
http://www.wpbeginner.com/news/whats-new-in-wordpress-4-2/feed/ 11