This is an accepted version of this page
42-405: WordPress ( WP , or WordPress.org ) is a web content management system . It was originally created as a tool to publish blogs but has evolved to support publishing other web content, including more traditional websites, mailing lists and Internet forum , media galleries, membership sites, learning management systems , and online stores . Available as free and open-source software, WordPress
84-418: A web shell ) that collect sensitive information. Developers can also use tools to analyze potential vulnerabilities, including Jetpack Protect, WPScan, WordPress Auditor, and WordPress Sploit Framework developed by 0pc0deFR. These types of tools research known vulnerabilities, such as CSRF , LFI , RFI , XSS, SQL injection, and user enumeration. However, not all vulnerabilities can be detected by tools, so it
126-471: A computer running the WordPress software package. WordPress was released on May 27, 2003, by its founders, American developer Matt Mullenweg and English developer Mike Little . WordPress Foundation owns WordPress, WordPress projects, and other related trademarks. "WordPress is a factory that makes webpages" is a core analogy designed to clarify the functions of WordPress: it stores content and enables
168-756: A development strategy that can transform WordPress into all sorts of software systems and applications, limited only by the imagination and creativity of programmers. These are implemented using custom plugins to create non-website systems, such as headless WordPress applications and Software as a Service (SaaS) products. Plugins could also be used by hackers targeting sites that use WordPress, as hackers could exploit bugs in WordPress plugins instead of bugs in WordPress itself. Phone apps for WordPress exist for WebOS , Android , iOS , Windows Phone , and BlackBerry . These applications, designed by Automattic, have options such as adding new blog posts and pages, commenting, moderating comments, replying to comments in addition to
210-420: A maximum rating of "Less Critical". Secunia maintains an up-to-date list of WordPress vulnerabilities. In January 2007, many high-profile search engine optimization (SEO) blogs, as well as many low-profile commercial blogs featuring AdSense , were targeted and attacked with a WordPress exploit. A separate vulnerability on one of the project site's web servers allowed an attacker to introduce exploitable code in
252-582: A much easier, "one-click" automated process in version 2.7 (released in December 2008). However, the filesystem security settings required to enable the update process can be an additional risk. In a June 2007 interview, Stefan Esser, the founder of the PHP Security Response Team, spoke critically of WordPress' security track record, citing problems with the application's architecture that made it unnecessarily difficult to write code that
294-556: A server to apply the templates at request time, they may also exist purely as design-time tools. These systems apply templates on-demand. They may generate HTML when a user visits the page, or the user might receive pre-generated HTML from a web cache . Most open source WCMSs support add-ons that extended the system's capabilities. These include features like forums, blogs, wikis, web stores, photo galleries, and contact management. These are variously called modules, nodes, widgets, add-ons, or extensions. JavaServer Pages|Some systems combine
336-544: A site running WordPress 4.7 or greater. The auditors quietly notified WordPress developers, and within six days WordPress released a high-priority patch to version 4.7.2, which addressed the problem. As of WordPress 6.0, the minimum PHP version requirement is PHP 5.6, which was released on August 28, 2014, and which has been unsupported by the PHP Group and not received any security patches since December 31, 2018. Thus, WordPress recommends using PHP version 7.4 or greater. In
378-425: A special mailing list or the project's Trac tool. Though largely developed by the community surrounding it, WordPress is closely associated with Automattic , the company founded by Matt Mullenweg. WordPress Foundation is a non-profit organization that was set up to support the WordPress project. The purpose of the organization is to guarantee open access to WordPress's software projects forever. As part of this,
420-537: A user to create and publish webpages , requiring nothing beyond a domain and a hosting service . WordPress has a web template system using a template processor . Its architecture is a front controller , routing all requests for non-static URIs to a single PHP file that parses the URI and identifies the target page. This allows support for more human-readable permalinks . WordPress users may install and switch among many different themes . Themes allow users to change
462-605: Is advisable to check the code of plugins, themes, and other add-ins from other developers. In March 2015, it was reported that the Yoast SEO plugin was vulnerable to SQL injection, allowing attackers to potentially execute arbitrary SQL commands. The issue was fixed in version 1.7.4 of the plugin. In January 2017, security auditors at Sucuri identified a vulnerability in the WordPress REST API that would allow any unauthenticated user to modify any post or page within
SECTION 10
#1732779641165504-500: Is among the most popular content management systems – it was used by 43.1% of the top 10 million websites as of December 2023. WordPress is written in the PHP language and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system , referred to within WordPress as "Themes". To function, WordPress has to be installed on a web server , either as part of an Internet hosting service or on
546-811: Is secure from SQL injection vulnerabilities, as well as some other problems. In June 2013, it was found that some of the 50 most downloaded WordPress plugins were vulnerable to common Web attacks such as SQL injection and XSS . A separate inspection of the top 10 e-commerce plugins showed that seven of them were vulnerable. To promote better security and to streamline the update experience overall, automatic background updates were introduced in WordPress 3.7. Individual installations of WordPress can be protected with security plugins that prevent user enumeration, hide resources, and thwart probes. Users can also protect their WordPress installations by taking steps such as keeping all WordPress installations, themes, and plugins updated, using only trusted themes and plugins, and editing
588-769: The Nordic region had its own WordCamp Nordic. The first WordCamp Asia was to be held in 2020, but cancelled due to the COVID-19 pandemic . WordPress' primary support website is WordPress.org. This support website hosts both WordPress Codex, the online manual for WordPress and a living repository for WordPress information and documentation, and WordPress Forums, an active online community of WordPress users. WordPress hosting services typically offer one-click WordPress installations, automated updates and backups, and security features to safeguard against common threats. Many also provide support and are configured for optimal performance with
630-670: The Trackback and Pingback standards for displaying links to other sites that have themselves linked to a post or an article. WordPress posts can be edited in HTML, using the visual editor, or using one of several plugins that allow for a variety of customized editing features. Before version 3, WordPress supported one blog per installation, although multiple concurrent copies may be run from different directories if configured to use separate database tables. WordPress Multisites (previously referred to as WordPress Multi-User, WordPress MU, or WPMU)
672-671: The 5.0 release. Having the Classic Editor plugin installed restores the "classic" editing experience that WordPress has had up until the WordPress 5.0 release. The Classic Editor plugin will be supported at least until 2024. As of August 2023, the Classic Editor plugin is active on over 5 million installations of WordPress. Many security issues have been uncovered and patched in the software, particularly in 2007, 2008, and 2015. According to Secunia , WordPress in April 2009 had seven unpatched security advisories (out of 32 total), with
714-448: The CMS. Web content management system A web content management system ( WCM or WCMS ) is a software content management system (CMS) specifically for web content . It provides website authoring, collaboration, and administration tools that help users with little knowledge of web programming languages or markup languages create and manage website content. A WCMS provides
756-484: The WCMS is not changed often but visits happen frequently. Administration is also typically done through browser-based interfaces, but some systems require the use of a fat client . A web content management system controls a dynamic collection of web material, including HTML documents, images , and other forms of media. A WCMS facilitates document control, auditing, editing, and timeline management. A WCMS typically has
798-604: The WordPress Photo Directory at the State of the Word 2021 event. It is an open-source image directory for open images maintained by the WordPress project. The image directory aims to provide an open alternative to closed image banks , such as Unsplash , Pixbaby, and Adobe Stock , whose licensing terms have become restrictive in recent years. Use in WordPress themes, for example, is restricted. In January 2022,
840-475: The ability to check for proper emoji rendering capability. Matt Mullenweg and Mike Little were co-founders of the project. The core lead developers include Helen Hou-Sandí, Dion Hulse, Mark Jaquith, Matt Mullenweg, Andrew Ozz, and Andrew Nacin. WordPress is also developed by its community, including WP tester , a group of volunteers who test each release. They have early access to nightly builds , beta versions, and release candidates. Errors are documented in
882-686: The ability to view the stats. The WordPress Accessibility Coding Standards state that "All new or updated code released in WordPress must conform with the Web Content Accessibility Guidelines 2.0 at level AA." WordPress also features integrated link management, a search engine –friendly, clean permalink structure; the ability to assign multiple categories to posts; and support for tagging of posts. Automatic filters are also included, providing standardized formatting and styling of text in posts (for example, converting regular quotes to smart quotes ). WordPress also supports
SECTION 20
#1732779641165924-547: The absence of specific alterations to their default formatting code, WordPress-based websites use the canvas element to detect whether the browser can correctly render emoji . Because Tor Browser does not currently discriminate between this legitimate use of the Canvas API and an effort to perform canvas fingerprinting , it warns that the website is attempting to 'extract HTML5 canvas image data. Ongoing efforts seek workarounds to reassure privacy advocates while retaining
966-405: The addition of widgets and navigation bars . Not all available plugins are always abreast with the upgrades, and as a result, they may not function properly or may not function at all. If the plugin developer has not tested the plugin with the last two major versions of WordPress, a warning message will be displayed on the plugin directory, informing users that the plugin may not work properly with
1008-588: The content or layout of a web page . Past content that was created on WordPress pages is listed under what is referred to as a Classic Block. Before Gutenberg, there were several block-based editors available as WordPress plugins, e.g. Elementor . Following the release of Gutenberg, comparisons were made between it and those existing plugins. The Classic Editor plugin was created as a result of User preferences and helped website developers maintain past plugins only compatible with WordPress 4.9, giving plugin developers time to get their plugins updated & compatible with
1050-499: The current release is officially supported, security updates are backported "as a courtesy" to all versions as far back as 4.0. The December 2018 release of WordPress 5.0, "Bebo", is named in homage to the pioneering Cuban jazz musician Bebo Valdés . It included a new default editor "Gutenberg" – a block-based editor; that allows users to modify their displayed content in a much more user-friendly way than prior iterations. Blocks are abstract units of markup that, composed together, form
1092-593: The features and functionality of a website or blog. As of December 2021, WordPress.org has 59,756 plugins available, each of which offers custom functions and features enabling users to tailor their sites to their specific needs. However, this does not include the available premium plugins (approximately 1,500+), which may not be listed in the WordPress.org repository . These customizations range from search engine optimization (SEO) to client portals used to display private information to logged-in users, to content management systems, to content displaying features, such as
1134-490: The following features: A WCMS can use one of three approaches: offline processing , online processing , and hybrid processing . These terms describe the deployment pattern for the WCMS in terms of when it applies presentation templates to render web pages from structured content. These systems, sometimes referred to as "static site generators", pre-process all content, applying templates before publication to generate web pages. Since pre-processing systems do not require
1176-410: The form of a back door to some downloads of WordPress 2.1.1. The 2.1.2 release addressed this issue; an advisory released at the time advised all users to upgrade immediately. In May 2007, a study revealed that 98% of WordPress blogs being run were exploitable because they were running outdated and unsupported versions of the software. To help mitigate this problem, WordPress made updating the software
1218-517: The foundation for collaboration, providing users the ability to manage documents and output for multiple author editing and participation. Most systems use a content repository or a database to store page content, metadata , and other information assets the system needs. A presentation layer ( template engine ) displays the content to website visitors based on a set of templates , which are sometimes XSLT files. Most systems use server side caching to improve performance. This works best when
1260-421: The idea of forking b2/cafelog and new features that he would want in a new CMS, in a blog post written on January 24, 2003. Mike Little, a professional developer, became the first to comment on the blog post expressing interest to contribute. The two worked together to create the first version of WordPress, version 0.70, which was released on May 27, 2003. Christine Selleck Tremoulet, a friend of Mullenweg, suggested
1302-524: The latest WordPress version. Most plugins are available through WordPress themselves, either via downloading them and installing the files manually via FTP or through the WordPress dashboard. However, many third parties offer plugins through their websites, many of which are paid packages. Web developers who wish to develop plugins need to learn WordPress' hook system, which consists of over 2,000 hooks (as of Version 5.7 in 2021) divided into two categories: action hooks and filter hooks. Plugins also represent
WordPress - Misplaced Pages Continue
1344-402: The look and functionality of a WordPress website without altering the core code or site content. Custom code can be added to the website by using a child theme or through a code editor. Every WordPress website requires at least one theme to be present. Themes may be directly installed using the WordPress "Appearance" administration tool in the dashboard, or theme folders may be copied directly into
1386-500: The name WordPress . In 2004, the licensing terms for the competing Movable Type package were changed by Six Apart , resulting in many of its most influential users migrating to WordPress. By October 2009, the Open Source CMS MarketShare Report concluded that WordPress enjoyed the greatest brand strength of any open-source content management system. As of May 2021, WordPress is used by 64.8% of all
1428-511: The offline and online approaches. Some systems write out executable code (e.g., JSP , ASP, PHP, ColdFusion, or Perl pages) rather than just static HTML. That way, personnel don't have to deploy the WCMS itself on every web server. Other hybrids operate in either an online or offline mode. File Transfer Protocol Too Many Requests If you report this error to the Wikimedia System Administrators, please include
1470-608: The organization owns and manages WordPress, WordCamp, and related trademarks . In January 2010, Matt Mullenweg formed the organization to own and manage the trademarks of WordPress project. Previously – from 2006 onwards – Automattic acted as a short-term owner of the WordPress trademarks. From the beginning, he intended later to place the WordPress trademarks with the WordPress Foundation, which did not yet exist in 2006 and which eventually took longer to set up than expected. On December 14, 2021, Matt Mullenweg announced
1512-574: The project began to gather volunteers, and in February, its own developer website was launched, where team representatives were next selected. WordCamps are casual, locally organized conferences covering everything related to WordPress. The first such event was WordCamp 2006 in August 2006 in San Francisco , which lasted one day and had over 500 attendees. The first WordCamp outside San Francisco
1554-494: The site's .htaccess configuration file if supported by the webserver to prevent many types of SQL injection attacks and block unauthorized access to sensitive files. It is especially important to keep WordPress plugins updated because would-be hackers can easily list all the plugins a site uses and then run scans searching for any vulnerabilities against those plugins. If vulnerabilities are found, they may be exploited to allow hackers to, for example, upload their files (such as
1596-494: The themes directory. WordPress themes are generally classified into two categories: free and premium. Many free themes are listed in the WordPress theme directory (also known as the repository), and premium themes are available for purchase from marketplaces and individual WordPress developers. WordPress users may also create and develop their own custom themes and upload them in the WordPress directory or repository. WordPress' plugin architecture allows users to extend or depreciate
1638-411: The websites whose content management system is known, and 41.4% of the top 10 million websites. Starting September 2024, Mullenweg engaged WordPress, Wordpress.com, and Automattic in a dispute leading to a lawsuit with hosting company WP Engine , causing widespread community concern. Main releases of WordPress are codenamed after well-known jazz musicians, starting from version 1.0. Although only
1680-496: Was a fork of WordPress created to allow multiple blogs to exist within one installation but can be administered by a centralized maintainer. WordPress MU makes it possible for those with websites to host their own blogging communities, as well as control and moderate all the blogs from a single dashboard. WordPress MU adds eight new data tables for each blog. As of the release of WordPress 3, WordPress MU has merged with WordPress. b2/cafelog , more commonly known as b2 or catalog ,
1722-736: Was held in Beijing in September 2007. Since then, there have been over 1,022 WordCamps in over 75 cities in 65 countries around the world. WordCamp San Francisco 2014 was the last official annual conference of WordPress developers and users taking place in San Francisco, having now been replaced with WordCamp US. First ran in 2013 as WordCamp Europe, regional WordCamps in other geographical regions are held to connect people who are not already active in their local communities and inspire attendees to start user communities in their hometowns. In 2019,
WordPress - Misplaced Pages Continue
1764-481: Was the precursor to WordPress. b2/cafelog was estimated to have been installed on approximately 2,000 blogs as of May 2003. It was written in PHP for use with MySQL by Michel Valdrighi, who was a contributing developer to WordPress until 2005. Although WordPress is the official successor, another project, b2evolution , is also in active development. As the development of b2/cafelog slowed down, Matt Mullenweg began pondering
#164835