WordPress.org

WordPress 3.1.2 is now available and is a security release for all previous WordPress versions.

This release addresses a vulnerability that allowed Contributor-level users to improperly publish posts.

The issue was discovered by a member of our security team, WordPress developer Andrew Nacin, with Benjamin Balter.

We suggest you update to 3.1.2 promptly, especially if you allow users to register as contributors or if you have untrusted users. This release also fixes a few bugs that missed the boat for version 3.1.1.

Download 3.1.2 or update automatically from the Dashboard → Updates menu in your site’s admin area.

Looking for something fun to do during your summer vacation? Why not check out a WordCamp! WordCamps are locally-organized casual conferences of, by, and for WordPress users, developers, and enthusiasts just like you. The focus of a WordCamp is to foster face-to-face connections and collaboration among the local WordPress crowd, but there are usually some out-of-towners there as well. Here are the WordCamps that have been approved so far for the summer:

April 16: WordCamp Seattle in Seattle, WA. This weekend! After taking a year off, WordCamp Seattle is back with tracks for bloggers, designers, and developers. This year they’ll feature a lineup including presentations by both local speakers and visitors like core committer Andrew Nacin, as well as an Ignite session of lightning talks at the end of the day.

May 5: WordCamp Vancouver (Developer Edition) in Vancouver, BC. This one-day WordCamp is aimed purely at developers working on the WordPress platform, and will not have content aimed at bloggers (as previous Vancouver WordCamps have). I predict we will start seeing more of these types of niche WordCamps moving forward, because they will mean smaller, more intimate events that allow more collaboration (and make it easier to find venues!). Note that we’re working with the organizers to get the tickets to a more reasonable price, so keep your eyes open this week if you’ve held off on buying a ticket because of the price tag.

May 7: WordCamp Switzerland in Brugg, Switzerland. This one will cover a wide range of topics, including getting started with WordPress, advanced development topics, BuddyPress, and an inside look at running a WordPress-based business.

May 14: WordCamp Orange County in Orange, CA. Already sold out! Orange County had their first WordCamp last year, and the organizers have put together another great event this time around.

May 14: WordCamp Paris in Paris, France. One of the last true unconference-style WordCamps, the Paris group will plan their schedule the morning of the event like they do at BarCamps. WordCamp Paris had one of the best WordCamp t-shirts ever a couple of years ago. And it’s in Paris in the spring.

May 21–22: WordCamp Raleigh in Raleigh, NC. Repeat organizers from the Raleigh WordPress Meetup Group are just starting to select speakers and put together their plans, but if it is anything like last year, the venue will be packed with WordPress professionals (and maybe there will be cookies). I’ll be attending this one, as will Nacin.

June 4–5: WordCamp Reno-Lake Tahoe in Reno, NV. Organized by a WordPress core UI group contributor, WordCamp Reno-Lake Tahoe is taking place in Reno and has a packed schedule full of visiting experts.

June 11–12: WordCamp Kansas City in Overland Park, KS. With publisher, designer, and developer tracks, Kansas City’s WordCamp will have a little something for everyone, presented in large part by local speakers.

June 17–19: WordCamp Columbus in Columbus, OH. WordCamp Columbus has a new organizer this year and is bringing the focus more firmly onto WordPress (and less on social media). Their 3-day event includes an entire day for newbies, and another for non-profits, a nice addition to the usual blogger/developer tracks.

July 9–10: WordCamp Montreal in Montreal, Quebec. This group consistently puts on a great every year. If you register now, you can still get a $10 discount and get both days for only $30 (with sessions in both English and French to reflect the bilingual nature of the city). Montreal plays host to a number of festivals throughout the year, and this weekend is no different, including festivals for the arts, comedy, tango, and even circus arts.

July 16: WordCamp San Diego in San Diego, CA. First WordCamp in San Diego! They have talking about this for over a year, and are now starting to really ramp up the planning. They’re finalizing their venue right now, and I would expect a great roster of speakers.

July 16-17: WordCamp Portsmouth in Portsmouth, UK. The annual WordCamp UK that moves from city to city each year alights this year in Portsmouth. This one is notable because Mike Little, co-founder of WordPress, is part of the organizing team.

July 23–24: WordCamp Boston in Boston, MA. Another one just about to lock down some details and get starting with speaker selection, etc. An easy train ride from so many places, and not in the middle of winter this year!

July 30-31: WordCamp Chicago has new organizers and is a new venue this year. A call for speakers, supporters, and volunteers will likely be posted sometime next week.

WordCamp Portland is looking for a venue before deciding on a date this year, as it has outgrown the space it’s used the past two years, but hopes to happen in September. If you would be interested in donating a venue to this popular event, please contact them.

We’ll hold off on posting fall events until later in the summer since there a lot in the planning stages now. To get the most up-to-date information, visit WordCamp Central.

Hope to see you at a WordCamp soon!

WordPress 3.1.1 is now available. This maintenance and security release fixes almost thirty issues in 3.1, including:

• Some security hardening to media uploads
• Performance improvements
• Fixes for IIS6 support
• Fixes for taxonomy and PATHINFO (/index.php/) permalinks
• Fixes for various query and taxonomy edge cases that caused some plugin compatibility issues

Version 3.1.1 also addresses three security issues discovered by WordPress core developers Jon Cave and Peter Westwood, of our security team. The first hardens CSRF prevention in the media uploader. The second avoids a PHP crash in certain environments when handling devilishly devised links in comments, and the third addresses an XSS flaw.

We suggest you update to 3.1.1 promptly. Download 3.1.1 or update automatically from the Dashboard → Updates menu in your site’s admin area.

Our release haiku:

Only the geeks know
What half this stuff even means
Don’t worry — update