Pawb.Social Reports @transparency

15 posts15 participants1 post today

The New Oil<a href="https://mastodon.thenewoil.org/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> security plugin <a href="https://mastodon.thenewoil.org/tags/WPGhost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WPGhost</a> vulnerable to remote code execution bug<a href="https://www.bleepingcomputer.com/news/security/wordpress-security-plugin-wp-ghost-vulnerable-to-remote-code-execution-bug/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/wordpress-security-plugin-wp-ghost-vulnerable-to-remote-code-execution-bug/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> campaign '<a href="https://mastodon.thenewoil.org/tags/DollyWay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DollyWay</a>' breached 20,000 <a href="https://mastodon.thenewoil.org/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> sites<a href="https://www.bleepingcomputer.com/news/security/malware-campaign-dollyway-breached-20-000-wordpress-sites/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/malware-campaign-dollyway-breached-20-000-wordpress-sites/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Tim ChambersFree idea: <a href="https://indieweb.social/tags/Ghost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ghost</a> and <a href="https://indieweb.social/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> blog posts that federate out should in the publishing UX suggest that authors add the optional hashtag <a href="https://indieweb.social/tags/Fediblog" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fediblog</a> to the post. Not mandatory, just a nudge. Would greatly help with the discovery of cool blogs to follow here. cc: <a href="https://mastodon.social/@pfefferle" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@pfefferle</a> <a href="https://john.onolan.org/" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@index</a>cc: <a href="https://caneandable.social/@WeirdWriter/114197062951945178" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://caneandable.social/@WeirdWriter/114197062951945178</a>

Matthias PfefferleI am just back from an awesome <a href="https://mastodon.social/tags/hackathon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackathon</a> at the <a href="https://mastodon.social/tags/cloudfest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudfest</a> We had three days to work on Federated (<a href="https://mastodon.social/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a>) Events, you can find our results on that lovely page: <a href="https://fedivents.blog/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://fedivents.blog/</a>Thanks especially to <a href="https://graz.social/@linos" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@linos</a> for his awesome work with the Event Bridge: <a href="https://wordpress.org/plugins/event-bridge-for-activitypub/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wordpress.org/plugins/event-bridge-for-activitypub/</a>...and to <a href="https://phpc.social/@heiglandreas" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@heiglandreas</a> for pitching and leading the project!<a href="https://mastodon.social/tags/ActivityPub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActivityPub</a> <a href="https://mastodon.social/tags/Fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fediverse</a> <a href="https://mastodon.xyz/@johnonolan" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@johnonolan</a> the team came up with the puppies without any knowledge of your newsletter, so this must be really a thing!

Matthias Pfefferlewe just released version 5.5.0 of the <a href="https://mastodon.social/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> <a href="https://mastodon.social/tags/ActivityPub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActivityPub</a> plugin <a href="https://github.com/Automattic/wordpress-activitypub/releases/tag/5.5.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/Automattic/wordpress-activitypub/releases/tag/5.5.0</a>

Konstantin Obenland’s :yikes:ActivityPub 5.5.0 for WordPress is here! 🚀 This update brings a ton of improvements, including a first step toward supporting Moves from Mastodon to WordPress—big things ahead! <a href="https://mastodon.social/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> <a href="https://mastodon.social/tags/ActivityPub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActivityPub</a> <a href="https://wordpress.org/plugins/activitypub/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wordpress.org/plugins/activitypub/</a>

David Bisset"Free software does not exist"<a href="https://progressplanner.com/free-software-does-not-exist/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://progressplanner.com/free-software-does-not-exist/</a>"The end result may be available at no cost, but it requires time, money and, above all, energy to get there.... And to keep the free software available, those people will need to stay motivated."<a href="https://joost.net/@joost" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@joost</a> <a href="https://phpc.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://phpc.social/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a>

Sir Rochard 'Dock' BunsonI have a <a href="https://universeodon.com/tags/Wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Wordpress</a> from 2 years ago with 1 post that I forgot about? :blobcatthink: That tracks. 😅

BillAlmost 8000 reported exploitable bugs reported in WordPress last year. How many were unreported?<a href="https://patchstack.com/whitepaper/state-of-wordpress-security-in-2025/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://patchstack.com/whitepaper/state-of-wordpress-security-in-2025/</a><a href="https://infosec.exchange/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordpress</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a>

Karsten Schmidt<a href="https://mastodon.thi.ng/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> security is such a bane & nuisance, even for people who aren't even using it. In the past 24h I've been bombarded again with dozens of WP login spam emails, and my (static) sites had >4600 requests obviously scanning for all sorts of WP-related files & vulnerabilities...Second to that is another group of scans (~1080) looking for mistakenly uploaded credential files in `.aws/*`, `.env.*`, `.ssh/*` etc.😡😤

a pup of coffee :v_agender: :bowie: ☕<a href="https://tech.lgbt/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> really doesn't like you making custom blocks without using build tools. I just want to write vanilla JS!

OTX BotCredit Card Skimmer and Backdoor on WordPress E-commerce SiteA sophisticated malware attack targeting WordPress WooCommerce sites was discovered, involving multiple components: a credit card skimmer, a hidden backdoor file manager, and a reconnaissance script. The attack focused on financial gain and long-term control. The skimmer, injected into the checkout page, collected payment and billing information, sending it to a malicious server. A PHP backdoor allowed remote system command execution, while a reconnaissance script gathered server information. The attack demonstrates the evolving complexity of e-commerce platform threats, emphasizing the need for strict security measures, regular scans, proper access controls, and timely updates to prevent such exploits.Pulse ID: 67d52aad906732f7bad24dfa Pulse Link: <a href="https://otx.alienvault.com/pulse/67d52aad906732f7bad24dfa" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://otx.alienvault.com/pulse/67d52aad906732f7bad24dfa</a> Pulse Author: AlienVault Created: 2025-03-15 07:22:21Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/BackDoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BackDoor</a> <a href="https://social.raytec.co/tags/CreditCard" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CreditCard</a> <a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/PHP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PHP</a> <a href="https://social.raytec.co/tags/RAT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RAT</a> <a href="https://social.raytec.co/tags/RCE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RCE</a> <a href="https://social.raytec.co/tags/RDP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RDP</a> <a href="https://social.raytec.co/tags/Word" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Word</a> <a href="https://social.raytec.co/tags/Wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Wordpress</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AlienVault</a>

TheZeldaZone👑🏳️‍⚧️🎮🎀Anyone know <a href="https://mastodon.social/tags/Torrents" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Torrents</a> better than me? I am trying to share my <a href="https://mastodon.social/tags/streaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#streaming</a> vods and other videos on Torrent because, well, too big to put them anywhere else but corpo sites. I put up one on Internet Archive and tried self-seeding it for a test and...yeah nobody can find my seed even tried downloading it myself on a different PC. No clue. Found a Torrent plugin for <a href="https://mastodon.social/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordpress</a> but it kinda sucks. I just need a tracker and ideally a non-hideous way to share it online

Vary, el del sombrero, en NeoPaquita 🍉🐀🦩🔻Sigo sin poder usar las app de <a href="https://neopaquita.es/tags/mastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mastodon</a> para controlar e interactuar desde <a href="https://alvarobayon.com/@curiosabiologia" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@curiosabiologia</a>. El sitio alvarobayon.com está en <a href="https://neopaquita.es/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordpress</a>, tiene activado el plugin <a href="https://neopaquita.es/tags/activityPub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#activityPub</a> y he instalado el “enable mastodon app” (EMA)Esta semana he intentado cacharrear un poco más, desactivando todos los plugin salvo los dos necesarios. Y nada. ¿Alguien tiene alguna idea antes de intentar preguntar en el foro del EMA?

ResearchBuzz: FirehoseSearch Engine Journal: Mullenweg Considers Delaying WordPress Releases Through 2027. “A leaked WordPress Slack chat shows that Matt Mullenweg is considering limiting future WordPress releases to just one per year from now through 2027 and insists that the only way to get Automattic to contribute more is to pressure WP Engine to drop their lawsuit. One WordPress developer who read that message […]<a href="https://rbfirehose.com/2025/03/14/search-engine-journal-mullenweg-considers-delaying-wordpress-releases-through-2027/" class="" rel="nofollow noopener noreferrer" target="_blank">https://rbfirehose.com/2025/03/14/search-engine-journal-mullenweg-considers-delaying-wordpress-releases-through-2027/</a>

Elizabeth Tai | 戴秀铃 🇲🇾A lot of times the <a href="https://hachyderm.io/tags/DigitalGarden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DigitalGarden</a> scene seems dominated by developers. People who exist in in-between places like me feel a bit frustrated that the tools used - the static site generators - are so unfriendly to non-developer minds. So, I'm glad that there are some folks who are building digital gardens on <a href="https://hachyderm.io/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordpress</a>. I have plans to use <a href="https://hachyderm.io/tags/Obsidian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Obsidian</a> and a plugin - probably either Quartz, Eveloppe or digital garden - to generate my static site one day, but this is a good workaround while I plan the possibly very complicated transition. I did think about using <a href="https://hachyderm.io/tags/Astro" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Astro</a> but the mechanics of it seem so frightening lolcc <a href="https://mastodon.social/@jenxi" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@jenxi</a> I know you did it successfully, but I doubt I'd be able to execute half of what you did!<a href="https://cagrimmett.com/2023/11/09/notes-on-making-a-digital-garden-with-wordpress/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cagrimmett.com/2023/11/09/notes-on-making-a-digital-garden-with-wordpress/</a>

Elizabeth Tai | 戴秀铃 🇲🇾WP.com's Query block is seriously the most unintiutive piece of UI ever. Even after reading the documentation I'm scratching my head lol.<a href="https://wordpress.com/support/wordpress-editor/blocks/query-loop-block/content/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wordpress.com/support/wordpress-editor/blocks/query-loop-block/content/</a><a href="https://hachyderm.io/tags/Wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Wordpress</a> <a href="https://hachyderm.io/tags/blogging" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blogging</a>

Darnell Clayton :verified:If this is true then only <a href="https://threads.net/@wordpressdotcom/" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@wordpressdotcom</a> would receive updates while the rest of the <a href="https://one.darnell.one/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a> community withers. 👉🏾 <a href="https://mastodon.social/@photomatt" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@photomatt</a> Considers Delaying WordPress Releases Through 2027 <a href="https://www.searchenginejournal.com/mullenweg-considers-delaying-wordpress-releases-through-2027/541821/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.searchenginejournal.com/mullenweg-considers-delaying-wordpress-releases-through-2027/541821/</a>I am not a lawyer or time traveler, but from Matt’s odd statements, it appears that <a href="https://one.darnell.one/tags/WPEngine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WPEngine</a> may actually win their lawsuit against <a href="https://one.darnell.one/tags/Automattic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Automattic</a>.Matt on the other hand is “cutting off his nose to spite his face” with these measures, which is baffling honestly.

Alexandre DulaunoyI find this vulnerability hilarious« The GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD plugin for WordPress is vulnerable to Stored Cross-Site Scripting »Often, websites only use cookies necessary for normal operation and don’t require explicit user consent. However, some legal teams insist on having it “to be on the safe side.” Now it’s very safe indeed. ;-)This particular vulnerability isn’t a big deal since it requires admin rights on WordPress to inject. If you’re already an admin, you can do worse things. The only advantage for attackers is that the injection spreads everywhere.<a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/gdpr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gdpr</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://infosec.exchange/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordpress</a> 🔗 <a href="https://vulnerability.circl.lu/vuln/CVE-2025-2205" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://vulnerability.circl.lu/vuln/CVE-2025-2205</a>

WordPressWordPress 6.8 Beta 2 is ready for download and testing! This release includes user enhancements incorporated into the latest Gutenberg updates. Your feedback can help us make it even better at release. Ready to give it a spin? Check out the link for more info! <a href="https://wordpress.org/news/2025/03/wordpress-6-8-beta-2/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wordpress.org/news/2025/03/wordpress-6-8-beta-2/</a><a href="https://mastodon.world/tags/WordPress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WordPress</a>

Recent searches

Search options

Administered by:

Server stats:

#wordpress