小兔博客 - WordPress
type: channel
link: https://32mb.net/category/wordpress/
items: WordPress 3.3.2 正式版本发布
items: WordPress 3.3.1 安全和维护更新
items: WordPress 3.3 正式版发布
items: WordPress 3.3 Release Candidate 1
items: WordPress 3.3 Beta 4 Available Now
items: Dandelion – Powerful Elegant WordPress Theme v2.6.7
items: WordPress 3.3 Beta 3 Available
items: WordPress 3.3 Beta 2
items: WordPress 3.3 Beta 1
items: WordPress脚本严重漏洞被曝光 可被外部写入文件

WordPress 3.3.2 正式版本发布
type: item
date: 2012-04-21T10:26:29+08:00
description: 今天WordPress 3.3.2正式版本已经可以看到更新版本，但目前没中文版本，应该也不久会有。刚刚发布的3.3.2版本，有一个安全更新，解决了一些以前版本中发现的安全漏洞。根据官方公告，三个外部库获得安全更新：Plupload，SWFUpload和SWFObject。上述漏洞由 Neal Poole、 Partlan和Szymon Gruszecki三人披露。 WordPress的3.3.2还解决了由该组织的核心安全团队确定的一些其他问题：plupload（版本1.5.4），WordPress的上传媒体使用。 SWFUpload，WordPress的先前用于上传媒体，仍可能在插件中使用。 SWFObject，WordPress的先前用于嵌入Flash内容，并仍可能在插件和主题中使用。WordPress 3.3.2也更新了： 网站管理员可以停用网络范围内的插件时，在特定情况下运行，是一个WordPress网络特权升级。 点击网址时的跨站点脚本漏洞。 当在旧版本的浏览器中进行评论和过滤网址后重定向跨站点脚本漏洞。下载:WordPress 3.32

WordPress 3.3.1 安全和维护更新
type: item
date: 2012-01-08T11:24:24+08:00
description: WordPress 3.3.1 现已发布。本维护版本修复了 3.3 版本的 15 处问题，另外还有一个影响了 3.3 的跨站脚本攻击漏洞。感谢 Joshua H.、Hoang T.、Stefan Zimmerman、Chris K. 和 Go Daddy 安全小组向我们的安全团队上报该问题。下载 3.3.1，或通过您站点后台的“仪表盘” → “更新”来升级。下载:WordPress 3.3.1

WordPress 3.3 正式版发布
type: item
date: 2011-12-14T13:41:39+08:00
description: 最新最棒的 WordPress 版本 —— 3.3 版本现已推出！本版本代号“Sonny”，献给伟大的爵士萨克斯手 Sonny Stitt 先生。您现在就可以在控制板升级啦！哦对了，差点忘了告诉您，从这个版本开始，中文版本将更强大的控制板（dashboard）改称为“仪表盘”了。自 3.0 版本以来，WordPress 已经有了六万五千余次下载了。作为第三次对 3 系列的修订，本版本主要显著提升了您的使用体验：导航菜单、上传机制，以及导入以往备份等等。 面向用户有经验的用户一定会喜欢全新的“拖放上传工具”、鼠标悬浮式导航菜单、一体化工具栏、增强的合作编辑体验、以及 Tumblr 导入工具。我们也关注新用户的体验。3.3 版本新增了“气泡提示”功能，在每次更新后，在功能上大幅度的改动会主动弹出提醒用户。同时，使用 3.3 版本新安装 WordPress 的用户会看到一个非常友好的消息框，提示如何开始使用 WordPress。每个页面上的“帮助”选项卡也有显著改进，实用性得到极大提升。站点的“仪表盘”也更加兼容 iPad 和其它平板电脑了。中文版本方面本次新加入了中文字数统计功能，在您写文章时会自动统计中文字数和英文词数之和。面向开发者 开发者应该会喜欢新的编辑器 API、最新的 jQuery 版本、更易用的帮助钩子，和更高的固定的链接性能。更多改进，请参见 Codex 文档（英文，正在翻译）和 Trac（英文）。英文版下载地址：http://wordpress.org/wordpress-3.3.zip 中文包下载地址：http://cn.wordpress.org/wordpress-3.3-zh_CN.zip

WordPress 3.3 Release Candidate 1
type: item
date: 2011-12-02T12:47:33+08:00
description: Release Candidate stage means we think we’re done and are about ready to launch this version, but are doing one last check before we officially call it. So take a look, and as always, please check your themes and plugins for compatibility if you’re a developer.Stayed up late tonight, Hammering toward RC1. Now with more icons!Download WordPress 3.3 Release Candidate 1.

WordPress 3.3 Beta 4 Available Now
type: item
date: 2011-11-24T12:52:39+08:00
description: The march toward 3.3 continues!With all our major tickets closed, we are very close to a release candidate. In Beta 4 we’ve fixed a bunch of bugs, cleaned up the UI, added real text in some of the screens that still had placeholder text in Beta 3 (post-update screen, the Dashboard welcome area, new feature pointers), and generally tightened things up. We updated to jQuery 1.7.1 and addressed a LOT of bugs.If you are a plugin or theme developer (or distributor), please test against Beta 4 to ensure there are no issues.If you find any problems, please report them as usual. Many thanks!Thought 3 was the last? Ha ha! Beta 4 is here – Better get testing!Download WordPress 3.3 Beta 4

Dandelion – Powerful Elegant WordPress Theme v2.6.7
type: item
date: 2011-11-12T17:17:17+08:00
description: UpdatesVersion 2.6.7 – 22 October 2011: -Added a new image slider – Content Slider -Updated Timthumb to the latest version available (2.8.2) -Fixed a small issue with the Portfolio Posts Loader – displaying “undefined” text below the image -Added a beginners section in the documentation -Did some other small improvements Version 2.6.6 – 26 August 2011: -Updated Timthumb to the latest version available (2.8) -Implemented an update notification functionality Version 2.6.5 – 3 August 2011: - Updated Timthumb (the image resizing script) to the latest version (1.34) – a security vulnerability was found regarding this script and version 1.34 fixes this vulnerability. Version 2.6.4 – 12 July 2011: - Improved the Thumbnail Slider functionality when browser tab is minimized for jQuery 1.6 Version 2.6.3 – 09 June 2011: - Fixed some incompatibilities that may occur in the next WordPress version (3.2) regarding the newly included jQuery 1.6 - Updated the Nivo slider to latest version – more sliding animations included Version 2.6.2 – 19 May 2011: -Added custom pattern field with upload functionality -Added a new sidebar widget – Pexeto’s posts loader (displays the latest blog posts within the sidebar with small thumbnails) -Improved the Thumbnail slider initial loading -Improved the contact form code -Improved the Showcase functionality -Some other small issues fixed -Code improvements Version 2.6 – 18 March 2011: -Added IE9 support -fixed some issues regarding timthumb and the upload functionality for WordPress Network (multisite) installations -added Quick gallery support in showcase items -code improvements Version 2.5. – 25 February 2011: -fixed some WordPress 3.1 incompatibilities -updated some of the external libraries to the latest versions Version 2.4. – 27 January 2011: -unlimited sliders functionality added -edit slider images functionality added -save last edited location in Pexeto Panel functionality added -Portfolio Posts Loader widget improvements -added some othe…

WordPress 3.3 Beta 3 Available
type: item
date: 2011-11-09T12:47:23+08:00
description: Testers, Beta 3 is now available! You know the drill: use a test install, see what you can break, and report any bugs you find. There have been 200 commits since Beta 2, but at this point, betas are not adding new features — it's all about fixing bugs, making things a little prettier, and editing text strings.As always, plugin and theme authors, PLEASE test your code against the beta so you can catch any incompatibilities now rather than after your users update their WordPress installation and find bugs for you.This time we really mean it, especially if your plugin uses jQuery . We've now updated to jQuery 1.7 in core, so please please pretty please check your plugins and themes against beta 3.These silly haikus – With so many releases, I run out of words.Download WordPress 3.3 Beta 3 now.

WordPress 3.3 Beta 2
type: item
date: 2011-10-20T22:28:16+08:00
description: Changes since Beta 1: Updated the Blue theme Fixed IE7 and RTL support Improved flyout menu styling and fixed several glitches Finished the Pointers implementation Landed the dashboard Welcome box for new installs Improved contextual help styling Tweaked the admin bar a little more Fixed a bunch of bugs Consult the full change log for details, and see the Beta 1 announcement for information on how to help test Beta 2.Welcome for the new – 3.3 at beta 2. (IE7, woo!)Download 3.3 Beta 2.

WordPress 3.3 Beta 1
type: item
date: 2011-10-18T17:17:03+08:00
description: WordPress 3.3 is ready for beta testers.As always, this is software still in development and we don’t recommend that you run it on a production site — set up a test site just to play with the new version. If you break it (find a bug), please report it, and if you’re a developer, try to help us fix it.If all goes well, we hope to release WordPress 3.3 by the end of November. The more help we get with testing and fixing bugs, the sooner we will be able to release the final version. If you want to be a beta tester, you should check out the Codex article on how to report bugs. Here’s some of what’s new: Media uploader Improved admin bar Fly out admin menus Remember, if you find something you think is a bug, report it! You can bring it up in the alpha/beta forum, you can email it to the wp-testers list, or if you’ve confirmed that other people are experiencing the same bug, you can report it on the WordPress Core Trac. (We recommend starting in the forum or on the mailing list.)Theme and plugin authors, if you haven’t been following the 3.3 development cycle, please start now so that you can update your themes and plugins to be compatible with the newest version of WordPress.Download WordPress 3.3 Beta 1And now, haiku.Features almost done…3.3 at Beta 1.Test it now — have fun!

WordPress脚本严重漏洞被曝光 可被外部写入文件
type: item
date: 2011-08-04T23:23:37+08:00
description: 数十万WordPress用户目前似乎正遭受图像处理脚本Timthumb的威胁，这是一个相当受欢迎的第三方脚本，它可以实现动态图像裁剪、缩放和调整，脚本的文件名是timthumb.php，该文档定义了数个可以远程提取的相册，但脚本并没有很好地验证这些域名，因此类似“http://flickr.com.maliciousdomain.com”这样的欺骗性二三级域名也会被通过，所以黑客理论上可以用任何域名后缀轻松仿冒，并通过缓存目录上传各种恶意程序。目前在Google搜索这一脚本的文件名，一共返回了39万个结果，这意味着这些博客全部遭受安全漏洞的影响，所以如果您运行着WordPress和Timthumb，请尽快做出行动修补或者暂停运行。