April 23, 2015 – By The BNC Team
On April 20, a vulnerability in certain implementations of WordPress’s add_query_arg and remove_query_arg functions was subject to coordinated disclosure and patches. The vulnerability has been linked to flawed documentation in the WordPress codex.
In the course of a code search looking for the use of these functions across the WordPress.org plugin repository, vulnerable use of these functions was identified in WPtouch Pro’s theme and extension switching routines. This code is present in versions 3 and higher of both the free and Pro editions of WPtouch, though it is only used in the Pro edition.
The release of 3.7.6 of our plugins addresses this vulnerability in WPtouch Pro 3 and also corrects the inactive code in WPtouch 3.
Other plugins affected by this vulnerability included:
- WordPress SEO
- Google Analytics by Yoast
- All In one SEO
- Gravity Forms
- Multiple Plugins from Easy Digital Downloads
- Download Monitor
- Related Posts for WordPress
- My Calendar
- P3 Profiler
- Multiple iThemes products including Builder and Exchange
- Ninja Forms
Although though the free edition of WPtouch includes some of the affected code, it is not executed in the regular operation of the plugin and will not expose users to vulnerability.
Versions of WPtouch and WPtouch Pro predating the 3.x release (such as WPtouch 1.9, and WPtouch Pro 2.x) do not use the add_query_arg and remove_query_arg functions and are also not subject to this vulnerability.
There is no security-related need to automatically update versions of the plugin not affected by this vulnerability.
As always we endorse keeping your WordPress installation and plugins up to date with all released updates.
Comments Off on The add_query_arg vulnerability & WPtouch
April 21, 2015 – By Duane Storey
As many of our customers and readers know, today is the day when Google officially starts to rollout its mobile algorithm changes that will favour websites with mobile-friendly versions. In terms of its ultimate impact, many SEO experts are estimating it will be larger than both the disruptive Panda and Penguin updates combined.
Achieving Google Mobile-Friendly Status with WPtouch Pro
WPtouch Pro is a Google-recommended mobile-friendly solution for WordPress, and most users who purchase it can achieve mobile-friendly status on their entire website in less than five minutes. Compared to the cost of reworking an existing website to achieve this, or starting from scratch with another commercial theme, the lack of time and financial investment required by WPtouch Pro to achieve this important status with Google is an easy decision for our customers to make.
We thank everyone who has trusted WPtouch Pro to help their WordPress websites achieve mobile-friendly status, and as always, we are here to help new customers who are unsure how to proceed. For most people, it’s just a matter of adding WPtouch Pro to their existing website and activating the plugin from the Plugins menu in WordPress.
Comments Off on The Google Mobile Search Algorithm Change Begins Today
April 13, 2015 – By Martin Kuplens-Ewart
Starting April 21, websites that are not mobile friendly will find themselves losing rank in Google’s mobile search results.
Many website owners have already used WPtouch Pro, Google’s recommended solution for WordPress websites, to easily and affordably get their website ready for the switchover.
To make sure you’re fully equipped to pass Google’s test, we’ve produced a free guide to making your website mobile-friendly with WPtouch.
Download the guide for information about the change, tips for choosing themes and configuring WPtouch Pro, and easy steps to confirm Google sees your mobile-friendly website.
Want to know more about Google’s changes? Read our earlier post.
Comments Off on Making your website mobile-friendly with WPtouch
March 23, 2015 – By Dale Mugford
With Google’s April 21st deadline looming, we want to make sure that WPtouch offers the easiest possible way to get your WordPress website mobile friendly.
Since WPtouch 3 was released, the plugin has undergone many changes with ever more features and functionality added. Although most features have been immediately visible in the WPtouch admin pages, we have kept some (less frequently used) options hidden unless the WPtouch admin mode was switched to ‘Advanced’.
In today’s releases for both the free and Pro versions we have eliminated the Advanced admin mode. Those features and settings are now immediately accessible in the WPtouch admin. We have also simplified settings, substituting automatic behaviour for some options that are no longer useful, are replaced by better solutions within the plugin, or encourage poor practices.
Of course the 3.7.5 releases also include a number of other improvements, including better compatibility with page builder and social icon plugins, bug fixes, and theme tweaks.
Whether you’re looking to get your website ready for Google’s mobile search changes next month or have been a long-term user of WPtouch, we’re confident you’ll love the improvements we’ve made in WPtouch 3.7.5.
Comments Off on WPtouch Pro 3.7.5: Mobile-friendly websites made even easier
March 11, 2015 – By Martin Kuplens-Ewart
Since the launch of WPtouch in 2008, mobile web usage has skyrocketed. Around the world ever more customers are shopping, researching, reading, and connecting with their mobile devices. Visitors to websites are becoming ever less tolerant of pinching and zooming, digging through pages overloaded with widgets and sidebars, and waiting for overly complex pages to load.
Google has been working for a few years to encourage website owners to prepare for this shift, producing reports and tools to help understand the challenges and opportunities involved. Most recently, Google’s mobile search results began highlighting sites that are optimized for mobile devices.
As of April 21, Google will be stepping up their pressure on website owners to be ready for mobile visitors. Starting then, sites that Google recognizes as mobile friendly will be pushed to the top of results when searching on a mobile device. Websites that are not ready for mobile visitors will be penalized with lower ranking in results–meaning less traffic, fewer ad views, and less revenue.
Built on seven years’ expertise in optimizing WordPress websites for mobile devices, WPtouch Pro and all of our themes achieve Google’s “Mobile-friendly” rating.
If you want to avoid being penalized on mobile searches on April 21, now is the time to get started with WPtouch, Google’s recommended mobile solution for WordPress website owners.
Comments Off on Not mobile-friendly? Google is about to penalize you!