Jetpack 4.0.4: Security Update, Bug Fixes and Improvements

Jetpack 4.0.4 is now available for download and includes some important security updates, bug fixes, and improvements. We recommend that you update your sites to the latest version as soon as possible.

Continue reading → Jetpack 4.0.4: Security Update, Bug Fixes and Improvements

Posted in Releases | Tagged , , , , , , , | Comments Off on Jetpack 4.0.4: Security Update, Bug Fixes and Improvements

Jetpack 4.0.3: Critical Security Update

Jetpack 4.0.3 contains a critical security update, and you should update all the sites you manage as soon as possible. You can update through your dashboard, or download Jetpack manually here.

jetpack-security

Continue reading → Jetpack 4.0.3: Critical Security Update

Posted in Releases | Tagged , , | 2 Comments

Jetpack 3.9.5 and 3.9.6: Maintenance Releases

WordPress 4.5 will be released in a few weeks, and we’ve made updates to Jetpack to account for the significant changes that will be introduced in this new version of WordPress.

These updates have involved making sure that certain Jetpack features work properly in the Customizer view, namely adding support for selective refresh. Big thanks to @westonruter for contributing the code!

Other enhancements and bug fixes:

miguel

  • Contact Form: no longer calling the datepicker method if it’s not available.
  • Single Sign On: settings checkboxes now honor filters and constants that restrict certain sign-in modes.
  • Shortcodes: fixed a problem with Gist fetching.
  • Shortcodes: fixed invalid HTML5 markup in YouTube embed code.
  • Shortcodes: made Vimeo links work properly in case of multiple mixed uses in one post.

Thanks to everyone who contributed to 3.9.5:

Christopher Finke, Derek Smart, Elio Rivero, Igor Zinovyev, Jeremy Herve, Matt Wiebe, Michael Cain, Miguel Lezama, Mo Jangda, Philip John, Tammie Lister, and Weston Ruter.

Jetpack 3.9.6 was also released today to fix an issue with some comments incorrectly rendering video embeds. Our apologies! Consider it an early April Fools’ Day joke…

Posted in Releases | Tagged , , , , , | Comments Off on Jetpack 3.9.5 and 3.9.6: Maintenance Releases

Five Things You Didn’t Know Jetpack Could Do

How well do you think you know Jetpack? Most people know about Stats, Publicize, and Sharing. You may even have your own personal favorite module like Tiled Galleries or Subscriptions. But what about the rest of Jetpack? Here are five things you might not know you can do:

Continue reading → Five Things You Didn’t Know Jetpack Could Do

Posted in Features | Tagged , , , , , , , | 17 Comments

Mobile-Friendly: How Jetpack Can Help

Making your website mobile-friendly is becoming as important as having good content: over 75% of Americans now access the internet on both desktop and mobile devices, and the numbers of users who solely use a mobile device or tablet is steadily on the rise. A mobile-friendly site also helps attract new visitors; in April 2015, Google expanded mobile-friendliness as a ranking priority, so sites that are mobile-friendly rank higher in search results.

What does that mean to you as a website owner? A little time spent making sure your site looks good and works well on mobile devices can have big results.

Your site might already be mobile-friendly!

Most WordPress themes developed today are built to be responsive. That means the theme responds to the needs of the viewers and their devices, shifting the layout based on the screen size, resolution, and device capabilities.

Here’s the Twenty Fifteen theme, which is fully responsive, on a desktop computer, tablet, and phone:

Twenty Fifteen responsive design

Twenty Fifteen’s responsive design

The layout adjusts based upon the screen size. The site keeps a consistent look, but adapts to the smaller screens. No matter what screen size a site visitor is using, it will automatically adjust — and since screen sizes are continually changing, the site can adapt to any screen size today and in the future.

How can you check to see if your theme is responsive? If you’re on a desktop machine, go to the site you want to test, let it load, then make your browser screen narrower. If the site has a responsive design, the elements from the web page will start to adjust and rearrange themselves into a still-readable format.

You can also check this using your own mobile device: simply visit the site you want to test and see how it looks. If it looks like exactly the same as the desktop version but shrunk down, your site is likely not responsive.

How can Jetpack help?

Jetpack’s Mobile Theme in action.

If your site isn’t responsive and you’re not able to update your theme to one that is, you can use the Jetpack Mobile Theme to create a simplified, mobile-friendly version of your website. The Mobile Theme displays your content in a clean, uncluttered interface for phones, making it easy for visitors to access your newest content on the go.

The default mobile theme has a pleasing blue color, but you can also tailor the Mobile Theme to bring your site’s mobile experience more in line with the full-screen version. You can customize the kinds of content that appear on your mobile home page, the colors, and the header.

In addition, viewers have the option to switch to the desktop version of your site by tapping the “View Full Site” link at the bottom of each page, so they can still choose to have the full site experience.

Ready to make your site mobile-friendly? Activate the Jetpack Mobile Theme in your Jetpack settings, and check out our support documents for more detail on how to customize it!

Posted in Spotlight | Tagged , , , , , | 2 Comments

Photon Now Delivers Images Even Faster than Before

We always strive to make your sites run as quickly and smoothly as possible, both on the front end and under the hood. Our most recent improvement? All self-hosted Jetpack-connected sites who have the Photon image service activated can now enjoy seamless support for the WebP image format.

What does this mean for you and your audience? This new feature provides size reductions of up to 34 percent for served images compared to a JPEG image of an equivalent visual quality level. Your viewers will save a lot of time loading your pages — time they can better spend enjoying the content you publish.

Image comparison - JPEG Image comparison - WebP
JPEG File Size – 43.84KB WebP File Size – 29.61KB

Visually identical images in JPEG and WebP format with their respective sizes.

While WebP isn’t currently supported by all browsers (see the WebP FAQ for more details), you don’t have to worry about anything. We auto-detect which browsers your readers are using to make sure they can enjoy your images in the best quality and highest speed possible.

We should note that by default, Photon is compressing the WebP images at a high quality setting. If you want to get the most out of this new feature, utilizing the quality parameter will yield the best results.

If you’d like to learn more about this fast-loading image format, check out the following links:

Posted in Features | Tagged , , | 7 Comments

Jetpack 3.8 – Google+ Badges and More

With the release of Jetpack 3.8, we’re introducing some great new additions for Google+ accounts and enhancements to existing Jetpack features. We’re also happy that we’ve had some fantastic contributions from members of the Jetpack community in this release.

Google+ Badges and Social Media Icons

New in Jetpack 3.8 are Google+ Badge widgets for your Google+ profiles, pages, and communities. Because Google+ profiles, pages, and communities are different, we offer slightly different versions of the badges:

  • Profiles: Allow people to easily find you on Google+ and add you to a circle directly from your website.
  • Pages: Includes the profile badge features and adds some additional functionality.
  • Communities: Help people find your community and engage with other users on a topic they find interesting.

You can configure these badges by width, choose from a light or dark theme, and choose from a portrait or landscape layout. There are more options for each badge version and you can read more about this new addition to our Extra Sidebar Widgets feature.

We’ve also heard your requests to add Google+ to our Social Media Icons widget. You can now configure Google+ alongside Facebook, Twitter, and all of our other available options in the widget. Need a refresher on how to set these up? Visit our Social Media Icons support page for more information.

Twitch.tv Shortcode Embeds

We’ve added the ability for you to use a shortcode to embed Twitch.tv videos and streams to your Jetpack-powered site. Simply use the shortcode and you can embed your favorite stream or add your own stream. You can even configure things like height, width, and autoplay. Find out more about the Twitch.tv shortcode.

New WordPress Contact Form Features and Updates

We’ve updated the WordPress Contact Form with some new form options and fixes. First, we’ve added a new “Checkbox with Multiple Items” field to the available contact form fields. Previously, you were only able to set up a single checkbox per field. This option allows you to set up multiple checkboxes all in a single field, saving you time.

Also, we’ve improved the styling of the emailed form responses. Now any responses to your WordPress Contact Form submissions will show up in the order you set in your contact form. No more jumbled responses!

And More…

Other key changes in Jetpack 3.8 include:

We worked hard to make Jetpack 3.8 great and we hope you enjoy it!

 

banner-1544x500

Community Involvement

In Jetpack 3.8, we’ve had some new features and fixes that have come from members of the Jetpack community. We’d like to take a moment to specifically thank these two community members who’ve taken the time to give back to the community:

First off, we’d like to thank Daisuke Takahashi for his exceptional work on the Google+ Badge Widget. Takahashi lives in Japan and is currently enrolled at university as a freshman and is a big fan of Open Source projects. He has been an active contributor to WordPress including speaking this past weekend at WordCamp Tokyo. Even with his self-professed “basic English skills,” he had no trouble with working with the Jetpack team on his initial code submission and subsequent changes to the widget. Thank you!

Secondly, we want to thank Eduardo Reveles for his substantial issue reports and patch submissions for Jetpack. Take a look at his GitHub profile to see all of his contributions to Jetpack. Thanks again for your help, Eduardo!

Want to help us make Jetpack even better? By contributing to Jetpack, you improve the functionality of millions of sites while gaining hands-on development experience. Best of all, people of all skill levels can help — whether you can barely recognize a filter (or don’t know what that means) or you’ve already authored your own plugins, there are ways for you to pitch in. See how you can help by visiting our Contribute page.

A special thank you to all who contributed to Jetpack during the 3.8 development cycle:
Adam Heckler, Alexander Kirk, Andrew Duthie, Brad Thomason, Brandon Kraft, Chase Livingston, Corey McKrill, Daisuke Takahashi, Dave Green, Derek Smart, Dion Hulse, Eduardo Reveles, Egill Erlendsson, Elliott Stocks, Enej Bajgoric, Gregory Cornelius, Ian Dunn, Igor Zinovyev, James Huff, Jeff Golenski, Jennifer M. Dodd, Jeremy Herve, Jesse Friedman, Joey Kudish, Jorge Bernal, Kat Hagan, Lance Willett, Marcus Kazmierczak, Michael Cain, Miguel Polfliet, Mo Jangda, Payton Swick, Richard Muscat, Rocco Tripaldi, Sam Hotchkiss, Sendhil Panchadsaram, Stephane Boisvert, Timmy Crawford, and Yoav Farhi.

Posted in Releases | 18 Comments

Jetpack: Protection From Brute Force XML-RPC Attacks

You may have read the recent news report from Sucuri about the latest vulnerability to your WordPress XML-RPC file: Brute Force Amplification Attacks via WordPress XML-RPC

miguel

Brute force attacks against XML-RPC are one of the oldest and most common types of attacks to your site. Recently, according to Sucuri’s post above, attackers have found a way to “amplify” these attacks – making it easier for attackers to try and break into your site.

How can you protect yourself from these attacks?

Simple. Use Jetpack’s Protect module.

Sam Hotchkiss, one of our Jetpack developers, wrote an article today on his blog going over the more technical details on how this new attack method works and how Jetpack protects you from this new threat.

If you’re running Jetpack with Protect enabled, you don’t need to do anything to keep yourself safe from this. We’ve already got it taken care of for you!

Posted in Features | Tagged , | 5 Comments

Jetpack 3.7.1 and 3.7.2: Security and Maintenance Releases

With the release of Jetpack 3.7.1 and 3.7.2 this week, we’ve added some important security updates and bug fixes. We strongly encourage that you update your sites to the latest version as soon as possible.

banner-1544x500

In Jetpack 3.7.1 we made a lot of improvements to the plugin, including some important security fixes:

  • Jetpack versions 3.7.0 and earlier are vulnerable to a cross-site scripting vulnerability in the contact form due to improper input sanitization. Reported by Marc-Alexandre Montpas from Sucuri.
  • Jetpack version 3.7.0 is vulnerable to an information disclosure vulnerability in certain hosting configurations. Reported by Jaime Delgado Horna of Listae.

Other notable updates in this release include:

  • Updating the Google+ logo in our sharing buttons.
  • Adding custom capabilities for module management for multisite installs.
  • Fixing a bug that was sending the contact form response fields in the wrong order.

In Jetpack 3.7.2, we fixed an error with the REST API that created multiple drafts and multiple published posts when posting using the REST API.

Full changelog can be found on our plugin page.

Thanks to everyone who contributed to these two releases: Alexander Kirk, Andrew Duthie, Brandon Kraft, Dennis Snell, Derek Smart, Dion Hulse, Eduardo Reveles, Enej Bajgoric, Eric Binnion, George Stephanis, Gregory Cornelius, Igor Zinovyev, James Nylen, Jeremy Herve, Jesse Friedman, Joen Asmussen, Joey Kudish, Kat Hagan, Marcus Kazmierczak, Miguel Lezama, Sam Hotchkiss, and Timmy Crawford.

Posted in Releases | Tagged , | Comments Off on Jetpack 3.7.1 and 3.7.2: Security and Maintenance Releases

Testers Needed: Jetpack Plugin Browser

While our Jetpack development team has been hard at work keeping your Jetpacks fueled up and ready for action – our developers over on WordPress.com have been busy too!

You may already be familiar with the great Jetpack features that utilize the WordPress.com interface: the ability to update your plugins across multiple sites with a single click, being able to view enhanced stats about your site, write new and update existing posts and pages with a beautiful editor, and more.

banner-1544x500

Now, there’s even more new things to try!

Over on the WordPress.com Horizon, where the makers of WordPress.com test upcoming changes and new features with the WordPress.com community, there’s a call for testers for a new addition to the Jetpack management features on WordPress.com.

They’re currently looking for testers with Jetpack sites to test the new Plugin Browser feature.

The Plugin Browser lets you find and install plugins from the WordPress.org plugin directory. You can search for keywords or browse within Featured, New and Popular categories. If you’ve got plugins on your site that you no longer need, then this update also lets you remove (delete) those plugins from your sites. You can still activate/deactivate plugins, and turn on (or off) auto-updates as well.

As part of the plugin browser project they have added more details to the single plugin view, which now serves reviews and ratings from the WordPress community, as well as the full description, changelog and other information specified by the plugin author.

“That’s great – how can I help?” you might ask.

Simple! There’s a post on the Horizon Feedback blog with all the details you may need including what to test, how to test, and how to submit feedback to the WordPress.com development team.

The Plugin Browser will be open for feedback through September 28th – so head on over to the Horizon post and get a sneak peek at this great new feature.

Thank you so much if you take the time to test. We appreciate it!

Posted in Misc | Tagged , , | 6 Comments
  • Recent Comments

    Muş Emlak on Jetpack 4.1: Secure Sign On Im…
    Jakob Boman on Jetpack 4.1: Secure Sign On Im…
    Jeremy on Jetpack 4.1: Secure Sign On Im…
    frenckcoppola on Jetpack 4.1: Secure Sign On Im…
    Jeremy on Jetpack 4.1: Secure Sign On Im…
  • Archives

  • Enter your email address to follow this blog and receive notifications of new posts by email.

  • Install Jetpack to see our line-up of features.

    Install Jetpack Now

    Don’t need all Jetpack’s features? No problem. Only activate what you need!

    Follow

    Get every new post delivered to your Inbox.

    Join 56,615 other followers