r/Wordpress

⚠️ WordPress 7.1.3 is now available and fixes 7 security vulnerabilities in WordPress Core, along with 4 additional bugs.

The most important fixes include:

🔹 Stored XSS through pending comments
Malicious code could potentially run when an administrator opens the Comments moderation screen.

🔹 SQL injection in the WordPress export system
Malicious input could remain hidden until someone runs a WordPress export.

🔹 Private comments exposed
Comments on private or unpublished posts could potentially be viewed by visitors who were not logged in.

🔹 Additional fixes
WordPress also patched an Imgur embed XSS issue, a denial-of-service bug, and several permissions-related vulnerabilities.

Interestingly, Anthropic reported 3 of the 7 vulnerabilities, with others reported by Trail of Bits, Patchstack, independent researchers, and the WordPress security team.

There are currently no known reports of these 7.1.3 vulnerabilities being actively exploited.

Still, I recommend updating sooner rather than later.

✅ Update WordPress Core to 7.1.3
✅ Confirm your backups are current
✅ Check older WordPress installations carefully, since some security fixes are still being backported

If automatic Core updates are enabled, your site may already be updated. See:
Dashboard → Updates

Stay patched!

Hello, I am currently building an e-commerce website on wordpress.org. I have a product that has a monthly subscription as well as other plans. But the appearance of it on that product page, I would like to change. I want to change it to a drop-down menu instead of all of the plans listed.

The regular customizer won't let me change that part. I was trying to learn CSS but I'm still unsure about it and if it'll still be accessible after I change the code. I am new to WordPress, plugins, and coding, so any tips will be useful!

Edit: Changed my product to a variable product and just listed the monthly subscription as its own thing because the other option is behind a paywall. Thank you guys for the info!

Inherited WP site that can only run on earlier PHP. Crashes on current PHP. So hosting rolled back to older version. Obviously security issue and not sustainable as versions move along. Best way to fix? Any shortcuts for the PHP-illiterate?

Hi WP’ers,

I am Kadir and I run a web and marketing agency for 17+ years and creating time to give back with the tutorials.

I started a YouTube channel because many requested there are tons of basic tutorials but not a lot of the REAL experiences like debugging erros, optimisations, migrations etc on real client websites.

I want to know what people want to learn or see, Im experienced and want to show everything the people want to see, if you have any Request please let me know or AMA.

Ps: if this is not allowed here, please excuse me and delete it.

Hi

I have created a plugin recently and i only have a url to send users to the marketplace of the wordpress outside the store. This is all good but there the users can only download the plugin.

How can i create a link to send users directly to the store inside the wordpress? I wanted to run some search ads for it because i believe is a good product that brings real value but I can't send users to the normal marketplace outside their store, i want to send them right to the install path.

How you solve this? I see one solution is asking for the store domain so i craft a url with the path, but this is super flacky.

Thank you

I am starting a tech agency that will offer WordPress and website development SEO digital marketing AI solutions virtual assistant services and automation.

I am looking for a name that feels professional modern trustworthy memorable and easy to pronounce and spell. I also want the name to be broad enough for the agency because I may offer more services in the future.

The main problem is finding an exact .com domain. I have already found some names that I liked but the .com was already taken. I do not want to choose a random name only because the domain is available.

I am looking for a unique and meaningful name that people can easily remember and connect with the agency.

If you were naming a tech agency today what kind of name or naming approach would you suggest?

I would really appreciate your ideas and suggestions.