Save the Children UK Alumni Association

Stephanie Roberts

@stephroberts

Profile

Registered: 7 years, 10 months ago

Forums

Topics Started: 0

Replies Created: 0

Forum Role: Member

WordPress.org blog: WordPress 7.1.2 Release
by John Blackbourn on 22nd September 2026 at 14:01
This security release features a fix for a critical severity security vulnerability. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background updates, the update process will begin automatically. Security update included in this release The security team would like to thank Robert Ressl for responsibly disclosing that an unauthenticated attacker can, under certain conditions, make page template resolution include a chosen readable local PHP file outside the active theme directories. If relevant pre-conditions for both the server environment and the active theme are met, this can lead to remote code execution (RCE). Thank you to these WordPress contributors This release was led by John Blackbourn. WordPress 7.1.2 would not have been possible without the contributions of the following people: Aaron Jorbin, Aki Hamano, Alex Concha, Ehtisham Siddiqui, fiocavallari, Jb Audras, Jeffrey Paul, Jeremy Felt, Joe McGill, John Blackbourn, Lance Willett, Manuel Camargo, marcs0h, martin.krcho, Mukesh Panchal, Olga Gleckler, Pascal Birchler, Peter Wilson, Rajin Sharwar, Ressl, Rudy Faile, Shail Mehta, Stephanie Walters, and vortfu. CVE and GHSA references Further details can be found in the advisory: CVE-2026-87902 / GHSA-7hp8-65ch-5whp. Backports As a courtesy, the security fix is being backported to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported. The backports are in progress and will ship as they become ready.
The Real Cost of Stripe on WordPress: Plugin Fees and Break-Even Calculator
by Themeisle Editorial on 22nd September 2026 at 13:38
Stripe fees are fixed, but plugin fees are a choice. Use this simple break-even calculator to see when a free Stripe plugin stops being free. The post The Real Cost of Stripe on WordPress: Plugin Fees and Break-Even Calculator appeared first on Themeisle Blog.
Open Channels FM: Balancing Tradition and Innovation in Genealogy During the Era of Artificial Intelligence
by Bob Dunn on 22nd September 2026 at 12:02
I makes genealogy faster and more accurate while Charleen Mullenweg explains the ongoing need for human review.
Open Channels FM: Invisible Unicode Attacks, CrowdSec Source Leak, and the AI Coding Boom Explored
by Bob Dunn on 21st September 2026 at 15:30
Invisible characters challenge spam filters, CrowdSec deals with a code leak, and AI is shifting what matters in software development.
bbPress: bbPress 2.6.18 is out!
by John James Jacoby on 21st September 2026 at 14:53
bbPress 2.6.18 is a maintenance release focused on forum imports and first-login password upgrades. Imported users can now upgrade their passwords on first login for more legacy forum formats, including cases where the original forum database is no longer available. This release also corrects PHPWind topic statuses, reply counts, and forum dates during import, and restores Super Moderator edit links on front-end bbPress user screens. bbPress 2.6.18 requires PHP 7.2 or newer and WordPress 6.0 or newer. Sites running an older PHP version should update PHP before upgrading bbPress. Read the 2.6.18 upgrade notes for importer compatibility details. These changes are also in the 2.7 development branch. The Plugin Directory’s development trunk remains at 2.7.0-alpha-3. Download bbPress 2.6.18 from WordPress.org, or update from your WordPress dashboard.