There are few matters in life that divide a room more than the prudence of putting pineapple on pizza. But if you’re of the persuasion that tropical fruit has no place on a pie, you’ll have to swallow a bitter pill — if you want to access the WordPress.org developer portal and forum, at least. […]
© 2024 TechCrunch. All rights reserved. For personal use only.
WordPress co-founder and CEO of Automattic Matt Mullenweg is trolling contributors and users of the WordPress open-source project by requiring them to check a box that says “Pineapple is delicious on pizza.”
The change was spotted by WordPress contributors late Sunday, and is still up as of Monday morning. Trying to log in or create a new account without checking the box returns a “please try again” error.
Last week, as part of the ongoing legal battle between WP Engine and Automattic, the company that owns WordPress.com, a judge ordered Mullenweg to remove a controversial login checkbox from WordPress.org that required users to pledge that they were not affiliated with WP Engine before logging in.
Thousands of sites running WordPress remain unpatched against a critical security flaw in a widely used plugin that was being actively exploited in attacks that allow for unauthenticated execution of malicious code, security researchers said.
The vulnerability, tracked as CVE-2024-11972, is found in Hunk Companion, a plugin that runs on 10,000 sites that use the WordPress content management system. The vulnerability, which carries a severity rating of 9.8 out of a possible 10, was patched earlier this week. At the time this post went live on Ars, figures provided on the Hunk Companion page indicated that less than 12 percent of users had installed the patch, meaning nearly 9,000 sites could be next to be targeted.
“This vulnerability represents a significant and multifaceted threat, targeting sites that use both a ThemeHunk theme and the Hunk Companion plugin,” Daniel Rodriguez, a researcher with WordPress security firm WP Scan, wrote. “With over 10,000 active installations, this exposed thousands of websites to anonymous, unauthenticated attacks capable of severely compromising their integrity.”
© Getty Images
Automattic, the company that owns WordPress.com, is required to remove a controversial login checkbox from WordPress.org and let WP Engine back into its ecosystem after a judge granted WP Engine a preliminary injunction in its ongoing lawsuit.
In addition to removing the checkbox—which requires users to denounce WP Engine before proceeding—the preliminary injunction orders that Automattic is enjoined from “blocking, disabling, or interfering with WP Engine’s and/or its employees’, users’, customers’, or partners’ access to wordpress.org” or “interfering with WP Engine’s control over, or access to, plugins or extensions (and their respective directory listings) hosted on wordpress.org that were developed, published, or maintained by WP Engine,” the order states.
In the immediate aftermath of the decision, Automattic founder and CEO Matt Mullenweg asked for his account to be deleted from the Post Status Slack, which is a popular community for businesses and people who work on WordPress’s open-source tools.
This story has been updated throughout with more details as the story has developed. We will continue to do so as the case and dispute are ongoing. The world of WordPress, one of the most popular technologies for creating and hosting websites, is going through a very heated controversy. The core issue is the fight […]
© 2024 TechCrunch. All rights reserved. For personal use only.
A California district court judge on Tuesday ruled that Automattic and its CEO Matt Mullenweg must restore WP Engine’s access to WordPress.org, a theme and plug-in repository owned by Mullenweg. Judge Araceli Martinez-Olguin noted that WP Engine’s access to WordPress.org, themes, plugins, and subdomains should be restored as they were on September 20, when Mullenweg […]
© 2024 TechCrunch. All rights reserved. For personal use only.
WPAI's products include an AI plugin maker, an assistant for site builders, and a chatbot for WordPress-related questions.
© 2024 TechCrunch. All rights reserved. For personal use only.
