Anthropic Announces 'Public Benefit Fund', Committing 5% of Its Shares
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Note: Similar to CVE-2026-10795, but I was on 1.26.8, I did not restore a backup or take any action for this to occur, to my knowledge.
TEAM UPDRAFT CONFIRM BREACH TO UPDRAFT-CENTRAL:
Looks like I was lucky to spot it as it happened, killed it, then posted here. Hopefully some of you caught it.
"On October 18, we identified unauthorized access to TeamUpdraft, which we believe may have exposed UpdraftCentral connection keys. Our team has since closed the access route.
Based on our development team’s recommendations, please take the following precautions:
-----------
My original post:
This morning my site started throwing fatal errors on every page. The cause was a plugin I never installed, called “Image Core” (folder wp-content/plugins/image-core/, author “StoneDock Tools”, version “3.1.1”, described as a “small maintenance toolkit”).
What the plugin does: it hooks init. If a request has ?_6212fc=_BEQI71sdL1mVAkslzjLMnG8ffyJfBwi, it creates a user called render_maint13 (email [render_[email protected]](mailto:[email protected]), display name “Site Tools”). That user gets the Editor role plus the manage_options and install_plugins capabilities. It then logs the visitor in as that user and redirects to wp-admin.
On my site it never got that far. The attacker referenced self::FIELD but had defined the values as global constants, so it died with Undefined constant ImageCore::FIELD before it could create the user. A working version would have been silent.
How it got in: the access logs show no wp-admin login, no plugin upload and no file editor use. Instead there were two POSTs to / with this user agent:
class-udrpc.php is UpdraftPlus’s remote-control library (UpdraftCentral).
Source IP for both: 2a09:bac5:4e21:2e3c::49b:9 (a Cloudflare WARP address, so not the attacker’s real IP).
UpdraftPlus was 1.26.8. An UpdraftCentral key had been created on my site, maybe that leaked somehow, or could be a bug.
Check your site:
Search your access logs for class-udrpc.php in the user agent, or _6212fc in URLs.
Look for wp-content/plugins/image-core/ and a user called render_maint13.
If you run UpdraftPlus: go to Settings → UpdraftPlus → UpdraftCentral, delete any keys you don’t use, and update. Or remove it. Reset your UpdraftPlus login password.
If you were hit: delete the plugin and the user, then rotate your passwords, salts, Application Passwords and API keys.
I got an email this evening that a site I managed had crashed. I logged in using recovery mode and found the offender was a plug-in called Content Module 987 published by QuietPress Labs. A quick search online returned no such publisher or any such plug-in.
I quickly disabled the plug-in and my site started working again. I examined the plug-in. I didn't seem to do much that I could tell looking at the code. I fear the site has been hacked. Anybody heard of something like this before??
Hey everyone,
I'm looking to gather some feedback from fellow WordPress users and email marketers who are currently using or have recently used Mailster.
A bit of context: I bought a lifetime license back when it was sold as a one-time purchase on CodeCanyon (formerly MyMail). Back then, it was a solid, reliable plugin for self-hosted email campaigns.
However, over time I’ve noticed a few changes and concerning trends, and I'd like to see if others are experiencing the same:
wp_mailster_* database tables tend to bloat significantly with logs, tracking data, and queue records, which can heavily impact site performance if not cleaned manually on a regular basis.For those still running Mailster:
Would love to hear your honest thoughts and recent experiences. Thanks!
I run s small VPS for around 10 WP installs. I have DirectAdmin with JetBackup running.
has anyone ever use Backuply? What was your experience, and how was the restore process?
thanks.
I have been working on my WordPress website for about a month now. I want to start selling stickers and other little goods. It was between this and Shopify, but Shopify was expensive and with WordPress it was cheaper and you would pretty much own the site.
I knew it would be a bit harder but I didn't realize how much there is with building on WordPress. I have my plug-ins for the shop, designed it, optimized my website speed, made sure I have security like CloudFlare. I keep running into more things that make me second guess myself. I made myself a maintenance checklist for it.
But I don't see a lot of people with art shops that are on WordPress, so I had to really research and find what I needed. What I'm concerned about is safety, I heard if you don't upkeep the site or make a mistake it can get hacked, and I wouldn't want that for my customers.
How can I be absolutely sure that the website will be safe and continue to be safe? (Also when I am editing and viewing my site it is pretty slow, when i check the Google speed it is at 100 and 90. Is that normal?)
Read more of this story at Slashdot.
Read more of this story at Slashdot.
Read more of this story at Slashdot.
A year ago, I attended a one day drupal training camp and met a few absolutely wonderful people.
So encouraging and just consistently hyping me up any time I got stuck. I tried to download the cms on my chrome book with Linux emulated and forgot to give it enough disk space and they didn't let that keep me behind.
They instead introduced drupal forge to me and made sure I left with some knowledge which I can't thank enough.
However, icl I kinda got lost and could not learn any more cause the difficulty increased tenfold so I never picked it up again but, I'd really like to learn it purely to make my, one day, mentors proud💚
Read more of this story at Slashdot.
Read more of this story at Slashdot.
I'm currently at the leadership level at a digital marketing agency. I've been here around 8 years. I have always been at digital marketing agencies my entire career. I actually love agencies. I'm one of the crazy ones. I run all things technical at this agency. I'm wondering what skills I should focus on and learn to stay valuable.
Throughout my stay at this company, I've managed a few full timers, and a few freelancers. Right now though, it's just me. Actually, the majority of my time at this company, it has just been me.
From a pure programming standpoint, it's marketing websites. Mostly custom WordPress websites with various degrees of complexity. We use as little plugins as humanly possible. This could mean anything from a 4 page brochure website to a large multi-site with a custom single-sign on member portal using a 3rd party API no one has ever heard of, all hand-coded by me. Tons of bespoke solutions to unique problems over the years. Tons of APIs, platforms, etc.
I also run the hosting side of the business. What this means is managing our reseller account, administering clients, choosing what packages we offer, how much they cost, managing our client backup strategy, managing monitoring and outages (I am the one getting out of bed at midnight when my phone lights up), launching new websites, etc. etc.
I've also created our devops strategy and implementation. Not especially complex for a marketing agency, but it's there. Every client in git, deploys to a staging server, deploys to a prod environment, etc. Normal stuff. In the past I have managed our full timers and freelancers access to this system. In rare cases a client dev also needs access and I will manage that as well.
Along with all of this, there is also lots of technical marketing tasks that I help with. I help create and debug Google Analytics triggers, campaign attribution, things like "why are there 5 form entries with UTM strings but Facebook only says 3 conversions", technical SEO cleanups, etc. Over the years I have integrated with lots of CRMs and marketing platforms. Hubspot, Salesforce, Pardot, Slate, Mailchimp, etc. Setting up marketing emails, setting up editable templates in those platforms, setting up forms that will embed on the site, setting up the site to pass hidden data into these forms, API calls that trigger CRM emails based on an action taken on the website, etc. Lots of client needs over the years.
Lastly, I am very client-facing. I am in most client meetings. There are lots of meetings that I set up and run myself, being the lone rep from my company in the meeting. I train all the clients on their systems. In lots of cases I am the one they email and interface with for a request.
With AI, I honestly don't know how valuable any of this stuff is that I do, lol. I've been using AI daily, and I'm not an idiot. I can clearly see a world where AI does everything I have mentioned above. Right now my strategy is to try and become an AI expert, and try to figure out new ways to use AI to benefit our customers. At the core of who I am, the reason I have stayed with agencies forever, is because I love helping a wide array of people. Always new people, always new problems. I like being their technical resource.
What would you guys do? I don't even know if agencies will exist in 5 years. What skills should I learn? What jobs should I be aiming for?
Hey everyone,
I've been working on a WordPress plugin recently because I kept running into the same problem over and over.
**I'm the developer of this plugin and I'm mainly looking for feedback from the WordPress community.**
A user reports a bug, and the entire report is basically:
"It doesn't work."
Now I have to figure out what page they were on, what they clicked, what they expected to happen, and how to reproduce it.
So I started wondering if it would be easier to just let people explain the problem out loud while they're using the site.
That idea turned into a plugin called Nik Voice Ticketing AI.
Instead of filling out a support form, visitors can record a short voice message and click through the page while explaining what's wrong. The plugin records their voice along with a timeline of clicks and page interactions. It can also use AI to turn everything into a cleaner support ticket.
It's completely open source and free.
WordPress:
https://wordpress.org/plugins/nik-voice-ticketing-ai/
GitHub:
https://github.com/Nik-Neural-AI-Inc/nik-voice-ticketing-ai
I'm genuinely curious what WordPress site owners and developers think.
Would love honest feedback, even if your reaction is "I'd never install this."
I’m trying to build a Wordpress website from scratch. I did same 7 years ago successfully. Now it seems the monetizing aspect is overwhelming. Transparency is totally absent until you get to the end and they suddenly say sorry this plugin isn’t actually a free plugin.
Same for AI assisted plugins advertised as free until the end.
This is the message I have gotten maybe 20 times in the past month (highlighted in yellow). It's word for word the exact same every time. Suggestions please?
Read more of this story at Slashdot.
[ Removed by Reddit on account of violating the content policy. ]
Read more of this story at Slashdot.