Plaza in behalf of Themes
Matt Mullenweg and Mike Little were cofounders in connection with the project. The core contributing developers include Ryan Boren, Mark Jaquith, Matt Mullenweg, Andrew Ozz, Peter Westwood and Andrew Nacin.]76]<\p>
WordPress is also developed along by its community, including WP testers, a denomination of volunteers who test each release.]77] They bosom unexpected access to nightly builds, beta versions and release candidates. Errors are logged advanced a special mailing list, or the project's Trac tool.<\p>
Though largely developed passing by the nuclear family circumfluent it, WordPress is all but associated with Automattic, the body founded by Matt Mullenweg. On September 9, 2010, Automattic handed the WordPress trademark to the newly created WordPress Foundation, which is an preventive organization pro WordPress.org (including the software and glory hole for plugins and themes), bbPress and BuddyPress."WordCamp" is the name reality so as to all WordPress-related gatherings, pair informal unconferences and plurality formal conferences.]78] The earlier such event was WordCamp 2006 in August 2006 in San Francisco, which lasted one day and had over 500 attendees.]79]]80] The first WordCamp outside San Francisco was guyed in Beijing in September 2007.]81] In the sequel then, there have been over 350 WordCamps in over 150 cities in 48 different countries around the world.]81] WordCamp San Francisco, an semiyearly event, remains the official annual rap session as to WordPress developers and users.WordPress's primary support website is WordPress.org. This refection website hosts both WordPress Codex, the online travel book for WordPress and a living repository for WordPress information and backing up,]83] and WordPress Forums, an active online community about WordPress users.In a June 2007 assessment, Stefan Esser, the founder of the PHP Comfort Response Team, spoke critically of WordPress's security palaestra record, citing problems with the application's architecture that made it unnecessarily formidable to write code that is secure from SQL injection vulnerabilities, as well as some foreign problems.]68]<\p>
In June 2013, it was sculpt that some in point of the 50 par excellence downloaded WordPress plugins were unprotected in passage to set Web attacks such as an instance SQL injection and XSS. A disorganize surveillance of the top-10 e-commerce plugins showed that 7 on them were vulnerable.]69]<\p>
In an deal to promote rebuild security, and as far as streamline the update worldly wisdom universal, casual background updates were introduced in WordPress 3.7.]70]<\p>
Individual installations of WordPress degrade be protected with guarding plugins.]71] Users can also protect their WordPress installations by deflowerment steps such as keeping all WordPress installation, themes, and plugins updated, using only trusted themes and plugins,]72] editing the site's.htaccess file to prevent many types of SQL injection attacks and block unauthorized access to sensitive files.Many faith issues]58]]59] have been laid bare in favor the software, particularly in 2007 and 2008. According to Secunia, WordPress present-day April 2009 had 7 unpatched security advisories (out of 32 total), with a maximum rating as regards "Less Basic."]60] Secunia maintains an up-to-date list of WordPress vulnerabilities.]61]]62]<\p>
In January 2007, many high profile comb commutator motor optimization (SEO) blogs, as well for example many low-profile commercial blogs featuring AdSense, were targeted and attacked with a WordPress exploit.]63] A aggravate vulnerability on one of the sake site's web servers allowed an attacker to interpolate exploitable code present-time the form of a lower case door to stylish downloads of WordPress 2.1.1. The 2.1.2 release addressed this issue; an exhortative free as air at the time advised all users up to upgrade apace.]64]<\p>
In May 2007, a study revealed that 98% of WordPress blogs being run were exploitable because they were running old hat and unsupported versions of the software.]65] In part to adapt this problem, WordPress made updating the software a much easier, "one click" automated measure in version 2.7 (released in December 2008).]66] However, the filesystem oversureness settings required up to enable the renovate process can be an additional plight.<\p>