April 21st, 2012· Three external libraries included in WordPress received security updates
· Plupload (version 1.5.4), which WordPress uses for uploading media
· SWFUpload, which WordPress previously used for uploading media, and may still be in use by plugins
· SWFObject, which WordPress previously used to embed Flash content, and may still be in use by plugins and themes
April 12th, 2012· Since we released Beta 1, we’ve committed more than 60 bug fixes and feature adjustments based on testing and feedback. If you’ve been testing Beta 1, please update to Beta 2 to make sure things are still working for you.
April 5th, 2012· Theme Customizer with Previewer
· Flexible Custom Header Sizes
· Selecting Custom Header and Background Images from Media Library
· Better experience searching for and choosing a theme
January 4th, 2012· This maintenance release fixes 15 issues with WordPress 3.3, as well as a fix for a cross-site scripting vulnerability that affected version 3.3
December 13th, 2011· Version 3.3 has significant improvements with pointer tips for new features included in each update, a friendly welcome message for first-time users, and revamped help tabs throughout the interface.
· Finally we’ve improved the dashboard experience on the iPad and other tablets with better touch support.
· There is a ton of candy for developers as well. I’d recommend starting your exploration with the new editor API, new jQuery version, better ways to hook into the help screens, more performant post-slug-only permalinks, and of course the entire list of improvements on the Codex and in Trac.
December 7th, 2011· Ensured that new toolbar (the admin bar in 3.2) has a consistent appearance across all browsers, and the API for developers is now final
December 1st, 2011· Now with more icons!
November 24th, 2011· Fixed a bunch of bugs, cleaned up the UI, added real text in some of the screens that still had placeholder text in Beta 3 (post-update screen, the Dashboard welcome area, new feature pointers), and generally tightened things up.
· Updated to jQuery 1.7.1 and addressed a LOT of bugs.
November 10th, 2011· Updated to jQuery 1.7 in core
October 20th, 2011· Updated the Blue theme
· Fixed IE7 and RTL support
· Improved flyout menu styling and fixed several glitches
· Finished the Pointers implementation
· Landed the dashboard Welcome box for new installs
· Improved contextual help styling
· Tweaked the admin bar a little more
· Fixed a bunch of bugs
October 11th, 2011· Media uploader
· Improved admin bar
· Fly out admin menus
July 13th, 2011· This maintenance release fixes a server incompatibility related to JSON that’s unfortunately affected some of you, as well as a few other fixes in the new dashboard design and the Twenty Eleven theme. If you’ve already updated to 3.2, then this update will be even faster than usual, thanks to the new feature in 3.2 that only updates files that have been changed, rather than replacing all the files in your installation.
July 5th, 2011· The focus for this release was making WordPress faster and lighter. The first thing you’ll notice when you log in to 3.2 is a refreshed dashboard design that tightens the typography, design, and code behind the admin. If you’re starting a new blog, you’ll also appreciate the fully HTML5 new Twenty Eleven theme, fulfilling our plan to replace the default theme every year
· Under the hood there have been a number of improvements, not the least of which is the streamlining enabled by our previously announced plan of retiring support for PHP4, older versions of MySQL, and legacy browsers like IE6, which allows us to take advantage of more features enabled by new technologies. The admin bar has a few more shortcuts to your most commonly-used actions. On the comment moderation screen, the new approve & reply feature speeds up your conversation management. You’ll notice in your first update after 3.2 that we’ll only be updating the files that have changed with each new release instead of every file in your WordPress installation, which makes updates significantly faster on all hosting platforms. There are also some fun new theme features shown off by Twenty Eleven, like the ability to have multiple rotating header images to highlight all of your favorite photos.
June 30th, 2011· Contains all of the fixes in 3.1.4; few minor RTL, JavaScript, and user interface fixes; and ensures graceful failures if 3.2 is run on PHP4.
June 30th, 2011· This release fixes an issue that could allow a malicious Editor-level user to gain further access to the site.
· Also incorporates several other security fixes and hardening measures
May 26th, 2011· Google Chrome Frame is now supported in the admin, if you have it installed. This is especially useful for IE 6 users (remember, IE 6 is otherwise deprecated for the admin).
· The admin is less ugly in IE 7.
· The blue admin color scheme has caught up to the grey one, and is ready for testing.
· We are now bundling jQuery 1.6.1. You should test any JS that uses jQuery.
May 26th, 2011· Various security hardening.
· Taxonomy query hardening.
· Prevent sniffing out user names of non-authors by using canonical redirects. Media security fixes
· Improves file upload security on hosts with dangerous security settings.
· Cleans up old WordPress import files if the import does not finish.
· Introduce “clickjacking” protection in modern browsers on admin and login pages.
May 12th, 2011· Performance improvements like you wouldn’t believe. What’s that mean? Things are faster!
· Distraction-free Writing. The visual editor’s full-screen composing experience has gotten a major overhaul, and is now available from HTML mode, too. More than ever, WordPress allows you to focus on what matters most — your content.
· Admin UI Refresh. The last major redesign of the WordPress was in 2008. This isn’t a major redesign, just a little facelift to keep us feeling young. WordPress turns 8 later this month, you know.
· New Default Theme. Introducing Twenty Eleven, based on the popular Duster theme. Rotating header images, post format support, and more.
· Browse Happy. WordPress is made to work with modern browsers. If you visit your Dashboard using an outdated web browser, we’ll let you know there’s a newer version available.
· Admin Bar. We’ve added more links to the admin bar to make it even more useful.
April 27th, 2011· It is a security release for all previous WordPress versions.
· This release addresses a vulnerability that allowed Contributor-level users to improperly publish posts.
April 5th, 2011· Some security hardening to media uploads
· Performance improvements
· Fixes for IIS6 support
· Fixes for taxonomy and PATHINFO (/index.php/) permalinks
· Fixes for various query and taxonomy edge cases that caused some plugin compatibility issues
February 23rd, 2011· This release features a lightning fast redesigned linking workflow which makes it easy to link to your existing posts and pages, an admin bar so you’re never more than a click away from your most-used dashboard pages, a streamlined writing interface that hides many of the seldom-used panels by default to create a simpler and less intimidating writing experience for new bloggers (visit Screen Options in the top right to get old panels back), and a refreshed blue admin scheme available for selection under your personal options.
· There’s a bucket of candy for developers as well, including our new Post Formats support which makes it easy for themes to create portable tumblelogs with different styling for different types of posts, new CMS capabilities like archive pages for custom content types, a new Network Admin, an overhaul of the import and export system, and the ability to perform advanced taxonomy and custom fields queries.
· With the 3.1 release, WordPress is more of a CMS than ever before. The only limit to what you can build is your imagination.
February 8th, 2011The Release Candidate 4 build includes the security fixes and enhancements included in 3.0.5 and addresses about two dozen additional bugs. This includes fixes for:
· Deleting a user and reassigning their posts to another user.
· Marking multiple users or sites as spam in multisite.
· PHP4 compatibility.
February 8th, 2011· Two moderate security issues were fixed that could have allowed a Contributor- or Author-level user to gain further access to the site.
· One information disclosure issue was addressed that could have allowed an Author-level user to view contents of posts they should not be able to see, such as draft or private posts.
· Two security enhancements were added. One improved the security of any plugins which were not properly leveraging our security API. The other offers additional defense in depth against a vulnerability that was fixed in previous release.
January 24th, 2011· The biggest change is the removal of AJAX list tables, which had been an effort to move all of our list-style screens to full AJAX for pagination, searches, and column sorts, and to consolidate the list-style screens into a single API that plugins could leverage. Unfortunately, with more testing came realizations that there were too many major bugs and usability issues with how the functionality was implemented, so we’ve spent the last week rolling back the most important portions of the feature.
· For users: AJAX has been entirely disabled for the list tables. We hope to bring this back again, in a form that is properly and fully implemented, in a future release. Column sorting remains, but everything else has returned to its 3.0 state.
· For developers: The entire list table API is now marked private. If you attempt to leverage new components of the API, you are pretty much guaranteeing that your plugins will break in a future release, so please don’t do that. We hope to enable all the fun new goodies for public use in a future release.
Other fixes in RC3 include:
· Properly display the author dropdown in Quick Edit
· Various important fixes to numerous taxonomy query variables
· Fixes to the theme deletion process
· Fixes to pages used for posts
· IIS and Multisite: Avoid resetting web.config on permalink save
· Properly validate post formats and their rewrite rules
January 2nd, 2011· The security fixes included in WordPress 3.0.4
· Fix issues related to handling a static front page
· Fixes and enhancements for the pagination buttons
· Fix searching for partial usernames
· Properly reactivate plugins after editing them
· Always show the current author in the author dropdown when editing a post
· Fixes for attachment taxonomies
· Fix node removal for the admin bar
· Fix the custom post type show_in_menu argument
· Various fixes for right-to-left languages
January 2nd, 2011Some of the new features to check out include:
· Post Formats
· Theme Search
· Internal Linking
· Admin Bar
· Ajaxified Admin
· Updated Tiny MCE
· Multi-taxonomy Queries
· Custom Post Type Index Pages
· Admin CSS Cleanup
· User Admin
· Network Admin
· Password Reset Redux
December 30th, 2010· Fixes a core security bug in our HTML sanitation library, called KSES
December 9th, 2010· This release fixes issues in the remote publishing interface, which under certain circumstances allowed Author- and Contributor-level users to improperly edit, publish, or delete posts.
December 1st, 2010WordPress 3.0.2 is available and is a mandatory security update for all previous WordPress versions. Haiku has become traditional:
· Fixed on day zero
· One-click update makes you safe
· This used to be hard
· This maintenance release fixes a moderate security issue that could allow a malicious Author-level user to gain further access to the site, addresses a handful of bugs, and provides some additional security enhancements. Big thanks to Vladimir Kolesnikov for detailed and responsible disclosure of the security issue!
July 30th, 2010· This maintenance release addresses about 50 minor issues.
July 28th, 2010Highlights:
· WordPress and WordPress MU have merged, allowing the management of multiple sites (called Multisite) from one WordPress installation.
· New default theme "Twenty Ten" takes full advantage of the current features of WordPress.
· New custom menu management feature, allows creation of custom menus combining posts, pages, categories, tags, and links for use in theme menus or widgets.
· Custom header and background APIs.
· Contextual help text accessed under the Help tab of every screen in the WordPress administration.
· Ability to set the admin username and password during installation.
· Bulk updating of themes with an automatic maintenance mode during the process.
· Support for shortlinks.
· Improved Custom post types and custom taxonomies including hierarchical (category-style) support. (Try the Custom Post Type UI or GD Custom Posts And Taxonomies Tools plugins to see the possibilities.)
· A lighter admin color scheme to increase accessibility and put the focus more squarely on your content.
General:
· Check required php and mysql versions in the update and notify if the server environment does not meet those requirements
· New wp_login_form() provides a simple login form for use anywhere
· New WordPress logo for admin header
· Place "Search Engines Blocked" mini-alert in the wp-admin header to prevent people from accidentally delisting themselves
· Remove 'Turbo' link from admin header and remove Turbo section from the Tools->Tools panel
· Renamed various menu items, for example Posts->Edit becomes Posts->Posts, and Links->Edit becomes Links->Links, and so on
· Revised administration menu icons
· Revised Gray Admin Color Scheme
· Revised information in readme.html file
· Show login form upon email-sent for recover/reset passwords
Dashboard:
· Add link so user can visit Dashboard after core upgrade
· Move Tools->Upgrade menu option to Dashboard->Updates and overhaul of user interface so themes, plugins, and core upgrades under one panel
· New menu management (navigation) via Menus option under Appearances Menu (#11817)
· Password nag for newly registered users
· Split Right Now widget into Content | Discussion
Posts:
· Allow for removing all tags in quick edit
· Allow themes to style the visual editor with editor-style.css file, using add_editor_style() function
· Enable custom taxonomy UI for pages as well as for posts
· Improved revision comparison user interface
· Shortlinks enabled, but still requires a plugin or theme support to fully realize this feature
· Added capital_P_dangit() filter to change 'Wordpress' to 'WordPress'.
Media:
· Add FunnyOrDie.com oEmbed support
· Allow Deletion of Media Alt text
· Change Media UI labels from "Post Thumbnails" to "Featured Image"
· Cleanup of the edit media screen
· Don't let "Crunching" overlap image name while uploading
· Optimize scan for lost attachments
· Support for additional file type extensions (Changesets 12581 and 13349)
Links:
· Order link categories by name, not count, on Add New/Edit Link page
Comments:
· Add additional columns to the Posts Comments view
· Allow configuration of number of comments to display Recent Comments dashboard module
· Block comments for future posts and password protected posts (when password not provided)
· Change to comments UI to show when a comment is replying to another, and link to the parent comment
Appearance:
· Add meta_value_num and meta_key ordering for WP_Query to allow natural numeric ordering of results
· Add filter to get_avatar() to allow avatars for custom comment types
· Allow Tab indenting, Shift-Tab (outdenting), and multi-line tabbing, in theme editor
· Allow the Tag Cloud Widget to support non-tag taxonomies
· Allow theme background customization via new Background panel under Appearance menu
· New template file, front-page.php, for the front page of a site
· New template file, single-{post_type}.php, for Custom Post Types
· New template files, author-{nicename}.php, and author-{id}.php, for author specific templates
· New template files, taxonomy.php, taxonomy-{taxonomy}.php and taxonomy-{taxonomy}-{term}.php for Custom Taxonomies
· Style tweaks to theme editor
· Tab interface for Manage Themes and Install Themes in Appearance->Themes panel
· Improved child theme support; child theme use is highly encouraged and as described in the Child Themes article, very simple to accomplish
· New comment_form() that outputs a complete commenting form for use within a theme template
· The Default (Kubrick), and Classic themes, are no longer included in the WordPress distribution, but are available in the Theme repository
Plugins:
· Add Details and Install Now action links under each plugin listed in Install Plugins
· Allow Tab indenting, Shift-Tab (outdenting), and multi-line tabbing, in plugin editor
· Upgrade plugins in bulk from the Plugins->Installed panel (#11542)
· When deleting plugins, check for uninstall hooks, and warn of data deletion
Tools:
· Add tag-to-category and category-to-tag converters to the Tools panel, add tag-to-category converter links to Posts->Post Tags panel
· Clean up OPML link export script
· Expanded filter criteria in Administration > Tools > Export panel
· Import WordPress fixes notices, attachments, and users
· Removed Turbo menu item, but because Turbo files weren't removed, Turbo may still work
· All importers moved to the plugin repository (e.g. WordPress Importer)
Users:
· Allow "No role for this blog" to be chosen in Users->Add New panel
· Added update_core, list_users, remove_users, add_users, promote_users, edit_theme_options, delete_themes and export Capabilities
Settings:
· Removed Settings->Miscellaneous admin menu, moved uploads settings to Settings->Media panel
· Revise Settings->General panel, change "Blog" reference to "Site"
· Revise Gray Admin Color Scheme
Install Process:
· Choose username and password during installation rather than using 'admin'
· Show "Log In" button on install.php when "Already Installed"
· Automatic generation of Security Keys during installation
· Validate table_prefix in wp-config.php generator
· Standardize information in wp-config-sample.php
Multisite:
· New Tools->Network panel to 'install' mulitsite/network ability, and is available only if WP_ALLOW_MULTISITE is defined in wp-config.php
· New Super Admin menu with Admin, Sites, Users, Themes, Options, Update, sub-menus (available only if is_multisite() && is_super_admin() )
· New Dashboard->My Sites panel
· New Tools->Delete Site panel
· Configure a Network (multisite/WPMU) using wp-config.php file
· Terminology changes regarding Sites, Blogs, Networks (see Andrew Nacin's explanation)
Development, Themes, Plugins:
· A better default excerpt; remove multiple white spaces from the excerpt as well as splitting safely on UTF8 strings
· Add Child theme support for theme header registrations, second call to register_theme_headers() should add more headers, and not replace existing headers.
· Add add_plugins_page() function to allow adding a submenu to under Plugins menu
· Add get_search_link() with Permastruct (/search/) support, update get_search_link(), get_search_feed_link() and get_search_comments_feed_link()
· Add is_comment_feed()
· Add redirect_to and associated filters to registration and password recovery
· Add a wp_loaded action that fires once WordPress init has finished
· Add an INDEX on comment_parent (wp_comments table) to speed up wp_delete_comment() and reparenting queries
· Add argument hide_if_empty to wp_dropdown_categories() to hide dropdown if no terms to display
· Add argument id to wp_dropdown_users() and wp_dropdown_categories()
· Add argument post_type to get_page_by_title()
· Add argument taxonomies to register_post_type()
· Add argument taxonomy to wp_list_categories() and wp_dropdown_categories() to be custom taxonomy aware
· Add capability 'edit_theme_options' (see developer discussion on this)
· Add capability 'list_users' to provide more controls over listing users vs. editing users
· Add compatibility code for old themes that relied on templates from the default theme without expressly identifying it as the parent theme (Note: the fallback to these template files is now deprecated and will be removed in a future version)
· Add custom hierarchical post type support to get_pages()
· Add defaults for 'post_content' and 'post_title' in wp_insert_post()
· Add email and login duplicate checking to wp_insert_user()
· Add extra hooks to "Right Now" dashboard widget
· Add filter to the links in paginate_links() and to the arguments in wp_link_pages()
· Add filter post_updated_messages to allow changes to the $messages array in wp-admin/edit-form-advanced.php
· Add filter post_updated action fires when a post is updated; post ID, current and previous post objects are passed and wp_check_for_changed_slugs() updated to use new hook
· Add flag to taxonomy registration allowing permalinks to be prepended with front, or not
· Add initial WP_DEBUG define to wp-config-sample.php and suggest plugin/theme developers use it
· Add mobile webkit styles for twentyten theme
· Add more orderby and select options to get_comments
· Add Multisite capabilities (#11644)
· Add new protocols for kses and make the list of protocols filterable
· Add optional comment ID argument to comment template functions
· Add replace method to $wpdb (#10864)
· Add support to get_terms() to allow 'include' & 'exclude' args to be arrays()
· Add support to is_singular() to allow testing of specific post_types such as is_singular('book') or is_singular( array( 'newspaper', 'book' ) )
· Add the generator element in feeds through the {rss2|atom|rdf|rss|opml}_head hooks
· Add 'themes_loaded' hook to run after parent/child themes have been included
· Add ?ver=DATE query strings to all images that changed since 2.9, to expire browser cache and bump versions on all CSS/JS files modified in that process
· Admin support for Custom Post Types (#9674)
· Admin support for hierarchical taxonomies (#10122)
· Allow Custom Post Types to have custom icons
· Allow enabling/disabling title and editor per post type, introduce remove_post_type_support(), add enable/disable for author override
· Allow include/exclude arguments for get_posts() and get_pages() to be an array
· Allow methods to be used as a callback in wp_unique_filename()
· Allow more special characters in wp_generate_password()
· Allow multiple To: recipients in wp_mail() and improve handling of \r\n in headers and multiple CC/BCC headers
· Allow people to attach PHP 5.3 Closures to filters and actions
· Allow plugins to modify the query run by WP_User_Search
· Allow themes to specify a menu fallback other than wp_page_menu()
· Better inline documentation for WP_DEBUG, WP_DEBUG_DISPLAY, and WP_DEBUG_LOG.
· Better POST_BY_EMAIL logic
· Check PHP and MySQL versions in upgrade.php
· Convert Terms page to use WP_Ajax_Response(), hierarchical terms will now appear under their parent OR have the parents prefixed (Changeset 13086)
· Create metaboxes for hierarchical taxonomies
· Create post_status=auto-draft when creating a new post item and status changes to draft on first auto-save
· Customizable death (wp_die() is now pluggable) (#11892)
· Deprecate get_alloptions()
· Deprecate get_profile() for get_the_author_meta()
· Deprecate trackback_rdf() (#11139)
· Deprecate add_option_update_handler() and remove_option_update_handler() in favor of register_setting() and unregister_setting()
· Deprecate automatic_feed_links() in favor of add_theme_support('automatic-feed-links')
· Deprecate get_bloginfo('text_direction') in favor of is_rtl()
· Deprecate set_current_user() in favor of wp_set_current_user()
· Deprecate MagpieRSS in favor of Simplepie (#11982)
· Deprecate Snoopy
· Deprecate User Levels (use Roles and Capabilities instead) (#10805)
· Deprecate clean_url() in favor of esc_url() and esc_url_raw() (#12309)
· Deprecate VHOST in favor of a boolean, SUBDOMAIN_INSTALL (Note: core will keep VHOST defined for plugins' sake, but you should only define SUBDOMAIN_INSTALL; will throw notice if VHOST is defined, and a warning if they somehow conflict; sunrise can still handle them
· Deprecate is_term and is_taxonomy in favor of term_exists and taxonomy_exists
· Don't check for the existence of index.php in the htaccess rewrite rules
· Don't query against entire users table in wp_dropdown_users()
· Don't require a default category for post types other than 'post'
· Ensure that for multiple sidebar additions, the ID is unique
· Extend the_modified_date() to support before/after/echo
· Fallback to wp_page_menu() from wp_nav_menu() if no menus are setup
· Fix Press This entity encoding
· Fix DST/Standard transition display in Settings->General
· Fix recursive chmod for WP_Filesystem
· Flag post statuses as public, private, protected, or internal
· Functon get_usernumposts() is now deprecated in favor of count_user_posts() for naming consistency
· Improve user listing performance
· In Twenty Ten theme, don't use post thumbnail as the custom header if it's smaller than the header size
· Introduce *_user_meta() functions, deprecate *_usermeta() family
· Introduce _ex(), a hybrid between _e() and _x(), to translate with context, then echo.
· Introduce add_editor_style() to easily register a stylesheet for the visual editor
· Introduce add_permastruct() and flush_rewrite_rules(), wrappers for the corresponding WP_Rewrite methods
· Introduce disabled() form helper, move selected() and checked() out of wp-admin and into full scope
· Introduce delete_user_option()
· Introduce get_available_languages()
· Introduce get_comment_id_fields() to get comment_id_fields() and introduce a filter on the output to add extra fields
· Introduce get_index_template() to allow child themes to override a parent theme's index.php
· Introduce get_intermediate_image_sizes() for getting all the intermediate image sizes to be used both when adding attachements and deleting
· Introduce get_post_types() function to get a list of registered post types
· Introduce get_super_admins() and allow hard-coding a global super_admins array and bypassing site options
· Introduce get_taxonomies() function to get a list of all registered taxonomies (#12516)
· Introduce get_template_part() function to include generic files (other than header, sidebar, footer) (#13146, #13816)
· Introduce get_term_feed_link() and use it in wp_list_categories()
· Introduce get_the_author_link()
· Introduce get_the_date()
· Introduce home_url()
· Introduce is_child_theme()
· Introduce is_post_type_hierarchical() to use to check if a post type support hierarchical
· Introduce is_rtl() and becomes defined when locale is loaded
· Introduce is_super_admin()
· Introduce is_textdomain_loaded()
· Introduce menu_page_url() for plugins to use to get the URL for the pages they have added
· Introduce register_admin_color_schemes() to registers the default admin color schemes
· Introduce remove_theme_support()
· Introduce post_type_exists()
· Introduce sanitize_key()
· Introduce set_current_screen(). Set current screen for inline edit ajax requests so post rows can be properly displayed.
· Introduce taxonomy_exists() to replace is_taxonomy()
· Introduce term_exists() to replace is_term()
· Introduce the_shortlink() template tag (#10640)
· Introduce unload_textdomain() and add plugin_locale and theme_locale filters to load_*_textdomain() functions
· Introduce unregister_theme_headers()
· Introduce update_blog_details()
· Introduce wp_check_filetype_and_ext() to handle mime/ext image comparisons and corrections for upload and sideload
· Introduce wp_reset_postdata() to reset the post global for the current query_posts() call after using a loop with a new WP_Query object
· Introduce constant DISALLOW_FILE_MODS for disabling all ops that modify core, theme, or plugins files
· Introduce constant DISALLOW_FILE_EDIT flag for enabling/disabling the theme and plugin editors
· Introduce constant DISALLOW_UNFILTERED_HTML to disallow unfiltered_html for all users, even admins and super admins
· Introduce constant SUBDOMAIN_INSTALL boolean to replace VHOST
· Introduce constant WP_DEFAULT_THEME to use to set 'default' theme when installing new sites
· Introduce Custom Taxonomies translation strings
· Introduce theme compatibility files so incomplete themes that need to inherit templates will inherit them from wp-includes/theme-compat
· Introduce WP_User::for_blog() and current_user_can_for_blog() to avoid calls to WP_User::_init_caps()
· Introduce wpdb::tables() to fetch table names on a global or blog scope
· Introduce ZipArchive version of unzip_file() (more efficient on memory usage for supporting hosts)
· Make get_bloginfo('wpurl') use site_url(), not get_option('siteurl')
· Make better use of $wp_query->get_queried_object()
· Make calendar valid HTML 5
· Merge clear_global_post_cache() into clean_post_cache()
· Merge Categories/Hierarchical taxonomies into edit-tags.php
· Merge edit-page-form.php into edit-form-advanced.php
· Merge edit-pages.php into edit.php
· Merge page.php into post.php
· Merge page-new.php into post-new.php
· More powerful version of is_tax()
· Move send_nosniff_header() into wp-includes so it can be used in wp-ajax.php
· New $required_mysql_version global in wp-db.php
· New comment_form() that outputs a complete commenting form for use within a template (#10910)
· New posts_search filter in query.php
· Numerous functions deprecated and changes to not use those deprecated functions
· Optimize single_post_title(), single_tag_title() & single_cat_title() to use WP_Query globals if available
· Pass default post to default_content, default_title, and default_excerpt filters, to allow filtering by post_type and other attributes
· Prevent page(\d+) slugs, and force a suffix
· Recommended reading from a theme developer's view regarding navigation menus; see Ryan Boren's recommendation
· Redirect ?page_id=xx for the Posts page to the posts page
· Refactor get_available_languages() to use glob() instead of *dir functions
· Reminder that escaping rules for options and transients changed so see Ryan Boren's explanation
· Reminder to plugin authors to test and make sure they do not generate unexpected output; see Ryan Boren's explanation
· Remove STYLE_DEBUG constant, SCRIPT_DEBUG now handles both scripts and CSS
· Remove wp-ajax.php. admin-ajax.php can be used (and is better for) for front-end/nopriv AJAX requests
· Rename get_post_link() to get_post_permalink() to avoid conflict with bbPress
· Rename the new 'themes_loaded' hook to 'after_setup_theme' to prevent confusion as to what it actually does & where its fired from
· Revised Coding Standards: no camelcase variables, use lowercase for variables
· Serve a real 404 for ?p=does-not-exist, ?cat=does-not-exist, etc
· Show custom hierarchical taxonomies in the menus
· Show theme installer only to super admins
· Suffix and version bump for ie.css
· The Settings API now supports automatic error display for validation problems with add_settings_error() (#11474)
· Tidy up logic for defining WP_DEBUG
· Update wp_popular_terms_checklist() to handle custom taxonomies
· Update jQuery to 1.4.2 (#12305)
· Update jQuery UI to 1.7.3
· Update json lib
· Update phpass to 0.2
· Update Prototype.js to 1.6.1
· Update Scriptaculous.js to 1.8.3
· Update SWFobject JS to 2.2
· Update wp_clear_scheduled_hook calls to use array when passing args
· Use admin_url() for images in wp-admin, to allow for filtering
· Use get_terms() in wp_count_terms()
· Various phpDoc updates
· Various changes to wp-includes/http.php
January 5th, 2010· This release addresses a handful of minor issues as well as a rather annoying problem where scheduled posts and pingbacks are not processed correctly due to incompatibilities with some hosts.
December 30th, 2009· RC1 contains a few more fixes, bringing the number of fixed tickets up to 23. If you are already running Beta 1, visit Tools->Upgrade in your blog’s admin to get RC1. You can also download the RC1 package and install manually. If all goes well, 2.9.1 will be here soon.
December 19th, 2009· Global undo/”trash” feature, which means that if you accidentally delete a post or comment you can bring it back from the grave (i.e., the Trash). This also eliminates those annoying “are you sure” messages we used to have on every delete.
· Built-in image editor allows you to crop, edit, rotate, flip, and scale your images to show them who’s boss. This is the first wave of our many planned media-handling improvements.
· Batch plugin update and compatibility checking, which means you can update 10 plugins at once, versus having to do multiple clicks for each one, and we’re using the new compatibility data from the plugins directory to give you a better idea of whether your plugins are compatible with new releases of WordPress. This should take the fear and hassle out of upgrading.
· Easier video embeds that allow you to just paste a URL on its own line and have it magically turn it into the proper embed code, with Oembed support for YouTube, Daily Motion, Blip.tv, Flickr, Hulu, Viddler, Qik, Revision3, Scribd, Google Video, Photobucket, PollDaddy, and WordPress.tv
November 12th, 2009· 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.
· The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch. The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Thanks to Benjamin and Dawid for finding and reporting these.
November 12th, 2009· A fix for the Trackback Denial-of-Service attack that is currently being seen.
· Removal of areas within the code where php code in variables was evaluated.
· Switched the file upload functionality to be whitelisted for all users including Admins.
· Retiring of the two importers of Tag data from old plugins.
August 12th, 2009· Security release
August 4th, 2009· Security release
July 20th, 2009· Fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin.
July 9th, 2009· Certain themes were calling get_categories() in such a way that it would fail in 2.8. 2.8.1 works around this so these themes won’t have to change.
· Dashboard memory usage is reduced. Some people were running out of memory when loading the dashboard, resulting in an incomplete page.
· The automatic upgrade no longer accidentally deletes files when cleaning up from a failed upgrade.
· A problem where the rich text editor wasn’t being loaded due to compression issues has been worked around.
· Extra security has been put in place to better protect you from plugins that do not do explicit permission checks.
· Translation of role names fixed.
· wp_page_menu() defaults to sorting by the user specified menu order rather than the page title.
· Upload error messages are now correctly reported.
· Autosave error experienced by some IE users is fixed.
· Styling glitch in the plugin editor fixed.
· SSH2 filesystem requirements updated.
· Switched back to curl as the default transport.
· Updated the translation library to avoid a problem with mbstring.func_overload.
· Stricter inline style sanitization.
· Stricter menu security.
· Disabled code highlighting due to browser incompatibilities.
· RTL layout fixes.
June 27th, 2009· Translation of role names fixed
· wp_page_menu() defaults to sorting by the user specified menu order rather than the page title
· Upload error messages are now correctly reported
· Autosave error experienced by some IE users is fixed
· Styling glitch in the plugin editor fixed
· SSH2 filesystem requirements updated
· Switched back to curl as the default transport
· Updated the translation library to avoid a problem with mbstring.func_overload
June 22nd, 2009· Certain themes were calling get_categories() in such a way that it would fail in 2.8. 2.8.1 works around this so these themes won’t have to change.
· Dashboard memory usage is reduced. Some people were running out of memory when loading the dashboard, resulting in an incomplete page.
· The automatic upgrade no longer accidentally deletes files when cleaning up from a failed upgrade.
· A problem where the rich text editor wasn’t being loaded due to compression issues has been worked around.
· Extra security has been put in place to better protect you from plugins that do not do explicit permission checks.
June 11th, 2009· Major New Improvements
· First and foremost, 2.8 is way faster to use. We’ve changed the way WordPress does style and scripting.
· The core and plugin updaters in previous versions of WordPress have been such a success we decided to bring the same to themes. You can now browse the entire theme directory and install a theme with one click from the comfort of your WordPress dashboard.
· If you make edits or tweaks to themes or plugins from your dashboard, you’ll appreciate the new CodePress editor which gives syntax highlighting to the previously-plain editor. Also there is now contextual documentation for the functions in the file you’re editing linked right below the editor.
· If you were ever frustrated with widgets before, this release should be your savior. We’ve completely redesigned the widgets interface (which we didn’t have time to in 2.7) to allow you to do things like edit widgets on the fly, have multiple copies of the same widget, drag and drop widgets between sidebars, and save inactive widgets so you don’t lose all their settings. Developers now have access to a much cleaner and robust API for creating widgets as well.
· Finally you should explore the new Screen Options on every page. It’s the tab in the top right. Now, for example, if you have a wide monitor you could set up your dashboard to have four columns of widgets instead of the two it has by default. On other pages you can change how many items show per page.
June 9th, 2009· CSS tweaks for the plugins screen, same style for active and inactive for …
· Allow CodePress to be disabled from Screen Options, see #10027
· Initialize var. Props dd32. fixes #10050
· Use array instead of query string notation. Prop dd32, kamiyeye. fixes …
· Validation fix. Props Harish. fixes #10049
· CSS fix for vertical misalignment in user-edit.php, props demetris, fixes …
· WP Upgrader improvements, props DD32, fixes #9836
· Preferred transport: move curl to last position and fockopen to 2nd …
· CSS tweaks for plugins-all screen
· Fix vertical misalignment in user-edit.php, fixes #10036
· Pass name to sidebar, footer, and header get actions. Props scribu. fixes …
· Fix the border in the install plugins table
· Add styling to the search results table for plugins, props …
· Don't pass by reference. Props kamiyeye. fixes #9994
· Add gray background to inactive rows on plugins screen
· Using css to hide the Save button in widgets without settings, props …
· Move buttons from row 4 to row 3 in the editor when row 3 is empty, fixes …
· Give login screen proper iPhone viewport, props noel, fixes #10023
· noindex for login. Props Viper007Bond, joostdevalk. fixes #10026
· Pass taxonomy to_tag_row() when adding tags via ajax. Props dd32. fixes …
· Add .description html class to edit-category-form.php and …
· Improve widgets hooks, props Denis-de-Bernardy, fixes #10013
· Add $hook_suffix as js var, fixes #10008
· Add two more images to manifest.php
· Add more translator comments for placeholders, props nbachiyski, fixes …
· Take out of translatable string, props nbachiyski, fixes #9995
· Allow translators to change the curly quotes in wptexturize(), props …
· Add "Accessibility Mode" for widgets screen (can be turned on from Screen …
· Use proper field for category intersection queries. fixes #9985
· We do not use plugin, we use file
· Test writability of ABSPATH when upgrading core or WP_PLUGIN_DIR when …
· Reload the widget form with the ajax response after save, add Close link …
· Fix margin on Find Themes button
· Reduce default Thickbox height on plugins install screen, props scribu, …
· Fix plugin/theme upgrade issues when using ftp extension. Fixes #9980 …
· Add context to the translation of Tag in the theme installer. Fixes #9981.
· Move the upload_dir filter before the directory is created so that plugins …
· Ensure the errors array is always defined so as to always have something …
· Add esc_sql(), for completeness.
· Add comment_moderation_headers filter. Props mtdewvirus. fixes #9969
· Use _wp_specialchars to get NOQUOTES. see #9934
· RTL fixes. Props yoavf. fixes #9975
· Add tool_box action to tools.php. Allows appending to tools.
· Fix notice when searching categories. Props gortsleigh. fixes #9970
· Fix widget unregister back-compat. fixes #9952
· Fix submenu position and state on folded admin menu, props sambauers, …
· Always show the open/close arrow next to the widget title, fixes #9914
· Fix search for custom taxonomies. Props gortsleigh. fixes #9971
· Revert [11475]. Keep those strings frozen for 2.8. see #9900
· Generate correct links for custom taxonomies. Props gortsleigh. fixes …
· Fix notice. Props wnorris. fixes #8433
· Fix parent=0 queries. Props Denis-de-Bernardy 107 minutes ago. . fixes …
· Note that paging applies to top-level comment counts. Props hailin. fixes …
· Adds the bulk actions to the bottom of the plugins listing table and other …
· TinyMCE 3.2.4.1, fixes #9950
· Check to see if we have an author before displaying it. See #9948.
· Add confirmation AYS when upgrading a theme. fixes #9904
· Fix default orderby for tt_id query. see #9937
· wp_unique_post_slug() fixes. Props Denis-de-Bernardy. fixes #9726
· Ensure autosave is run before showing preview for new posts/pages.
· Fix unlink warning. see #9936
· Fix loop start, loop end workflow. Props Denis-de-Bernardy. fixes #9944
· Trim white space
· Fix the inserting of caption shortcode when the upload path contains …
· Revert [11202], see #9726
· Don't use esc_html() for DB bound data. see #9934
· Don't use short tag. Props DD32. fixes #9920
· Allow a plugin to filter the list of Page statuses. Fies #9928 props …
· Add orderby = none option to wp_get_object_terms(). Props …
· Add a hook in print_footer_scripts as in print_head_scripts, props arena, …
· Improve Filesystem method choice for 'direct'; introduce FS_METHOD …
· Remove context from wp_feed_cache_transient_lifetime filter and filter in
· Restore LEFT JOIN for post_status_join. fixes #9851 see #9720
· Trim tailing whitespace
· Set eol style
· Add a wp_lostpassword_url() function to complete the set. Based on patch
· Hide options from users when they don't make any sense for them. Fixes
· Allow plugins to filter the expiration time of the SimplePie cache. Fixes
· Delete widgets when dragged back to Available Widgets, add ui.droppable.js
· Plugins update notices css tweak
· Initialize $table variable in wp-admin/themes.php, props mdawaffe, fixes
· Allow a different role to be set for users when they are created in a call
· Pass references and more context to the new 'user_profile_update_errors'
December 10th, 2008· There comes a time in every WordPress release when it’s ready for the world , to come out of its cocoon and feel the light of the world on its wings for the first time.
· It’s not quite that time yet, but we’re as close as we’ve ever been, hence the immediate availability of 2.7 Release Candidate 2, or RC2 for short.
· Of course if you were already testing 2.7, you can just use the built-in core updater (Tools > Upgrade) to download and install RC2 for you (and later upgrade you to the final release when it’s available) but if not you can use the download link above.
· We feel this release is pretty much exactly what we’re going to ship as 2.7, barring any final bugs or polish tweaks that you report or we find.
December 2nd, 2008· With the release of RC1, we’re in the final leg of development before the release of 2.7. 280 commits since beta 3 have polished the new admin UI (including new menu icons created by the winners of our icon design contest) and fixed all known blocker bugs.
· We think RC1 is ready for everyone to try out. Please download RC1 and help us make the final release the best it can be. As always, back up your blog before upgrading.
November 25th, 2008· Fixes one security problem and three bugs
November 1st, 2008· It is bringing a new visual design. This design is almost completely implemented, but there are still a few areas that aren’t quite finished
· There are also several glitches in certain browsers. Beta 1 provides the best experience in Firefox and Safari
October 24th, 2008· Fixed vulnerability in Snoopy library