Jetpack 3.9.2: Maintenance and Security Release

Jetpack 3.9.2 is now available for download. We’ve added two security updates as well as several bug fixes and enhancements. We recommend that you update your sites to the latest version as soon as possible.

Jetpack – Supercharge your WordPress

Security updates

  • Beautiful Math: there was a potential XSS vulnerability when parsing LaTeX markup within HTML elements. The issue was discovered and fixed by our security team.
  • Contact Form: private site credentials could be saved in plain text in WordPress’ postmeta table when said credentials were set to be stored in Environment variables. The issue was discovered by Oliver Liu.

Other minor fixes

This release also includes other bug fixes:

  • Nova Menus: fixed notices as well as issues when adding menu items in bulk.
  • Publicize: Authors can now access their Publicize settings again.
  • Publicize: fixed problems for Australian and Canadian English sites using Publicize to send their posts to Facebook.
  • Embeds: it is now possible to embed Instagram posts using a www in the URL.
  • Widget Visibility: fixed an issue appearing when a page title matched an existing page ID.
  • And many more updates, listed in the changelog.

Enhancements

We added 2 new oEmbed providers, Codepen and Sketchfab. Just paste a URL in your post editor, and enjoy! Here’s a Codepen example:

We also added new filters to allow you to customize the Contact Info widget, define custom patterns to be ignored by Jetpack Markdown, or change the heading of the Related Posts.

Finally, we created a [jetpack_top_posts_widget] shortcode to allow you to display the Top Posts & Pages Widget anywhere on your site.

Staging Mode

Do you use a backup / cloning plugin to clone your production site to a staging environment? Starting with Jetpack 3.9.2, you can use a constant or a filter to flag a site as “Staging site”, thus avoid conflicts and synchronization issues with Jetpack.

Thanks to everyone who contributed to 3.9.2:

Alex Kirk, Allen Snook, Andrew Duthie, Barry Abrahamson, Ben Lowery, Bob Ralian, Brandon Kraft, Chris Rosser, Christopher Finke, Claus Colloseus, Crystal Barton, Dan Walmsley, Daryl L. L. Houston, Derek Smart, Elio Rivero, Enej Bajgoric, Eric Binnion, Gregory Cornelius, Igor Zinovyev, James Nylen, Jenia Laszlo, Jeremy Herve, Joey Kudish, Jorge Bernal, Justin Shreve, Kat Hagan, Konstantin Kovshenin, Lance Willett, Mahangu Weerasinghe, Marcus Kazmierczak, Matt Wiebe, Miguel Lezama, Mike Adams, Mo Jangda, Payton Swick, Rocco Tripaldi, Sam Hotchkiss, Sendhil Panchadsaram, Stephen Edgar, Timmy Crawford, and Veselin Nikolov.

Posted in Releases | Tagged , | 13 Comments

Jetpack 3.9 — Sitemaps, a new Skype Sharing Button, and More

With the release of Jetpack 3.9, we’re introducing a brand new module, as well as a lot of improvements for several existing Jetpack modules.

Jetpack’s new Sitemaps Module

Jetpack already includes features like Subscriptions and Publicize, to let your readers know whenever you publish a new post on your site. You can now let Search Engines know, too!

What are sitemaps? Sitemaps are files that list each post and page that should be indexed by search engines like Google or Bing.

Once this new module is activated, two sitemaps will be created: a generic sitemap, available at yoursitename.com/sitemap.xml, as well as a News Sitemap, available at yoursitename.com/news-sitemap.xml. The News sitemap is useful if you want your posts to appear in Google News.

You can learn more about this new module here.

A new Skype Sharing Button

Skype Sharing Button

Now that Skype offers a Skype button, we’ve added it to Jetpack’s Sharing module. To add it to your site, head over to Settings > Sharing in your dashboard, and drag the new Skype button to your list of sharing buttons.

Social Menu

Social Menu is a new tool that is available for all theme developers. It allows site owners to create a new menu location which is used to display links to Social Media Profiles.

To learn how to add Social Menu support to your theme, you can follow the instructions on our support page.

And More…

This release also adds its fair share of improvements to existing modules, as well as bug fixes:

  • Added new options to allow management of users on your site directly from WordPress.com or from the WordPress.com Desktop app.
  • Made several changes to Photon to improve compatibility with WordPress 4.4. Custom image sizes are handled better now and all responsive image sizes will be properly displayed when using the Photon module.
  • Photon is now enabled by default on sites using HTTPS. You don’t need to use a filter to enjoy Photon on your HTTPS site anymore!
  • Added support for Wistia oEmbeds.
  • Fixed some issues with long album and track IDs in the BandCamp shortcode. Also added support for two new parameters: tracks and esig.
  • And a lot more! You can check the full changelog here.

Once again, a big thank you to all Jetpack Contributors:

Alex Shiels, Andrew Duthie, Andrew Ozz, Andy Peatling, Biser Perchinkov, Brandon Kraft, Dan Robert, Derek Smart, Dion Hulse, Miguel Polfliet, Eduardo Reveles, Elio Rivero, Eric Binnion, George Stephanis, Hiroshi Urabe, Igor Zinovyev, Jeff Golenski, Jennifer M. Dodd, Jeremy Herve, Jesse Friedman, Joen Asmussen, Joey Kudish, Jonathan Sadowski, Joseph Scott, Justin Shreve, Kat Hagan, Kelly Dwan, Lance Willett, Matt Wiebe, Michael Cain, Miguel Lezama, Rachel Baker, Richard Muscat, Rocco Tripaldi, Sam Hotchkiss, Scott Grant, Steve Seear, Stéphane Boisvert, Takashi Irie, Thomas Guillot, and Xiao Yu.

Posted in Releases | Tagged , , , , | 12 Comments

Jetpack 3.8.2 – Photon and YouTube Shortcode Fixes

Jetpack 3.8.2 is out! In this release, we focused on fixing a few specific and annoying bugs that popped up.

Jetpack – Supercharge your WordPress

Photon:

We fixed a regression created in version 3.8.1 where Photon did not respect some custom image sizes from other plugins or themes. Photon respects all image sizes again.

YouTube Shortcode:

WordPress 4.4 made some changes to the way Shortcodes are parsed, which broke our YouTube shortcode.  We’re now filtering this shortcode to output properly so you don’t need to go back update your shortcodes in your existing posts – we’ve taken care of that for you.

Wufoo Shortcode:

We’ve tightened up security in the Wufoo shortcode.  If you use this shortcode, you should upgrade to 3.8.2 as soon as possible.

Other minor fixes:

We’ve also cleared up a couple very minor bugs with Carousel, Publicize, Google+ widget, and Infinite Scroll.

Contributors for this release include Aaron Graham, Alex Mills, Alexander Concha, Brandon Kraft, Derek Smart, Eduardo Reveles, Elio Rivero, Eric Binnion, Igor Zinovyev, Jeremy Herve, Kat Hagan, Lance Willett, Miguel Lezama, Rocco Tripaldi, Sam Hotchkiss, and Takashi Irie.

Thank you for your contributions!

See full changelog.

Posted in Releases | Tagged , , , | 3 Comments

Jetpack 3.8.1 – WordPress 4.4 Compatible

With the WordPress 4.4 Release Candidate now available, we wanted to release our fully-compatible version of Jetpack a little early. So here it is, along with some minor bug fixes and accessibility improvements.

Jetpack – Supercharge your WordPress

Photon + Responsive Images

There are some cool things coming in WordPress 4.4, such as responsive images.  To take full advantage of this, we made sure that Photon serves responsive images as well.

Twenty Sixteen

If you’ve had the pleasure of testing out Twenty Sixteen, we’ve included some compatibility styling to make sure Jetpack features such as Related Posts, Share Buttons, Likes, and Infinite Scroll all look great.

Accessibility Enhancements

WordPress made some adjustments to the heading levels in 4.4 to improve accessibility. We scrubbed Jetpack to make sure our heading levels are semantic and accessible to screen readers as well.

More Streamlined

We went through and optimized the images that we display within the Jetpack Admin, which dropped our image directory from 1.8 MB to 856 KB. Every little bit counts!

Bug Fixes

Fixed some minor bugs with Carousel, Markdown, Single Sign On, and Subscriptions.

Contributors for this release include Adam Heckler, Alex Kirk, Brandon Kraft, Chris Wiegman, Derek Smart, Eduardo Reveles, Enej Bajgoric, Ian Dunn, Igor Zinovyev, Jake Jackson, Jeff Golenski, Jeremy Herve, Joey Kudish, Konstantin Obenland, Michael Cain. Miguel Lezama, Rocco Tripaldi, Sam Hotchkiss, Scott Grant, and Takashi Irie.

See full changelog.

Posted in Releases | Tagged , , , | 11 Comments

Jetpack 3.8 – Google+ Badges and More

With the release of Jetpack 3.8, we’re introducing some great new additions for Google+ accounts and enhancements to existing Jetpack features. We’re also happy that we’ve had some fantastic contributions from members of the Jetpack community in this release.

Google+ Badges and Social Media Icons

New in Jetpack 3.8 are Google+ Badge widgets for your Google+ profiles, pages, and communities. Because Google+ profiles, pages, and communities are different, we offer slightly different versions of the badges:

  • Profiles: Allow people to easily find you on Google+ and add you to a circle directly from your website.
  • Pages: Includes the profile badge features and adds some additional functionality.
  • Communities: Help people find your community and engage with other users on a topic they find interesting.

You can configure these badges by width, choose from a light or dark theme, and choose from a portrait or landscape layout. There are more options for each badge version and you can read more about this new addition to our Extra Sidebar Widgets feature.

We’ve also heard your requests to add Google+ to our Social Media Icons widget. You can now configure Google+ alongside Facebook, Twitter, and all of our other available options in the widget. Need a refresher on how to set these up? Visit our Social Media Icons support page for more information.

Twitch.tv Shortcode Embeds

We’ve added the ability for you to use a shortcode to embed Twitch.tv videos and streams to your Jetpack-powered site. Simply use the shortcode and you can embed your favorite stream or add your own stream. You can even configure things like height, width, and autoplay. Find out more about the Twitch.tv shortcode.

New WordPress Contact Form Features and Updates

We’ve updated the WordPress Contact Form with some new form options and fixes. First, we’ve added a new “Checkbox with Multiple Items” field to the available contact form fields. Previously, you were only able to set up a single checkbox per field. This option allows you to set up multiple checkboxes all in a single field, saving you time.

Also, we’ve improved the styling of the emailed form responses. Now any responses to your WordPress Contact Form submissions will show up in the order you set in your contact form. No more jumbled responses!

And More…

Other key changes in Jetpack 3.8 include:

We worked hard to make Jetpack 3.8 great and we hope you enjoy it!

 

banner-1544x500

Community Involvement

In Jetpack 3.8, we’ve had some new features and fixes that have come from members of the Jetpack community. We’d like to take a moment to specifically thank these two community members who’ve taken the time to give back to the community:

First off, we’d like to thank Daisuke Takahashi for his exceptional work on the Google+ Badge Widget. Takahashi lives in Japan and is currently enrolled at university as a freshman and is a big fan of Open Source projects. He has been an active contributor to WordPress including speaking this past weekend at WordCamp Tokyo. Even with his self-professed “basic English skills,” he had no trouble with working with the Jetpack team on his initial code submission and subsequent changes to the widget. Thank you!

Secondly, we want to thank Eduardo Reveles for his substantial issue reports and patch submissions for Jetpack. Take a look at his GitHub profile to see all of his contributions to Jetpack. Thanks again for your help, Eduardo!

Want to help us make Jetpack even better? By contributing to Jetpack, you improve the functionality of millions of sites while gaining hands-on development experience. Best of all, people of all skill levels can help — whether you can barely recognize a filter (or don’t know what that means) or you’ve already authored your own plugins, there are ways for you to pitch in. See how you can help by visiting our Contribute page.

A special thank you to all who contributed to Jetpack during the 3.8 development cycle:
Adam Heckler, Alexander Kirk, Andrew Duthie, Brad Thomason, Brandon Kraft, Chase Livingston, Corey McKrill, Daisuke Takahashi, Dave Green, Derek Smart, Dion Hulse, Eduardo Reveles, Egill Erlendsson, Elliott Stocks, Enej Bajgoric, Gregory Cornelius, Ian Dunn, Igor Zinovyev, James Huff, Jeff Golenski, Jennifer M. Dodd, Jeremy Herve, Jesse Friedman, Joey Kudish, Jorge Bernal, Kat Hagan, Lance Willett, Marcus Kazmierczak, Michael Cain, Miguel Polfliet, Mo Jangda, Payton Swick, Richard Muscat, Rocco Tripaldi, Sam Hotchkiss, Sendhil Panchadsaram, Stephane Boisvert, Timmy Crawford, and Yoav Farhi.

Posted in Releases | 18 Comments

New Plugin Browser

We are thrilled to announce the launch of the new Plugin Browser for your Jetpack sites. Now, you can install plugins from the WordPress.org plugin directory on all of your Jetpack sites from a single interface. You can also manage updates, and remove plugins you no longer need.

New Plugin Browser

New Plugin Browser

Until now, Jetpack sites with Manage enabled were only able to activate previously-installed plugins and set those plugins to autoupdate. Now, you can install new plugins as well as remove any plugins that are no longer being used.

In addition, we have dramatically improved the detailed view for a single plugin. You can see the compatibility with WordPress versions, ratings, descriptions, changelogs, and more!

Screen_Shot_2015-09-29_at_2_02_32_PM.png

WP Super Cache ready to be installed.

 

Pro tip: If you find yourself browsing the WordPress.org plugin repository and want to install the plugin on your Jetpack site, you can just replace the .org in the URL with .com and be taken to the new Plugin Browser where you can install the plugin with a single click. You will need to be logged into your WordPress.com already for this to work.

 

Posted in Releases | Tagged , , , | 8 Comments

Jetpack 3.7.1 and 3.7.2: Security and Maintenance Releases

With the release of Jetpack 3.7.1 and 3.7.2 this week, we’ve added some important security updates and bug fixes. We strongly encourage that you update your sites to the latest version as soon as possible.

banner-1544x500

In Jetpack 3.7.1 we made a lot of improvements to the plugin, including some important security fixes:

  • Jetpack versions 3.7.0 and earlier are vulnerable to a cross-site scripting vulnerability in the contact form due to improper input sanitization. Reported by Marc-Alexandre Montpas from Sucuri.
  • Jetpack version 3.7.0 is vulnerable to an information disclosure vulnerability in certain hosting configurations. Reported by Jaime Delgado Horna of Listae.

Other notable updates in this release include:

  • Updating the Google+ logo in our sharing buttons.
  • Adding custom capabilities for module management for multisite installs.
  • Fixing a bug that was sending the contact form response fields in the wrong order.

In Jetpack 3.7.2, we fixed an error with the REST API that created multiple drafts and multiple published posts when posting using the REST API.

Full changelog can be found on our plugin page.

Thanks to everyone who contributed to these two releases: Alexander Kirk, Andrew Duthie, Brandon Kraft, Dennis Snell, Derek Smart, Dion Hulse, Eduardo Reveles, Enej Bajgoric, Eric Binnion, George Stephanis, Gregory Cornelius, Igor Zinovyev, James Nylen, Jeremy Herve, Jesse Friedman, Joen Asmussen, Joey Kudish, Kat Hagan, Marcus Kazmierczak, Miguel Lezama, Sam Hotchkiss, and Timmy Crawford.

Posted in Releases | Tagged , | Comments Off on Jetpack 3.7.1 and 3.7.2: Security and Maintenance Releases

Jetpack 3.7 — Simpler UI, Support for Development Sites, and More!

Hang on to your hats! Jetpack 3.7 is now available for your self-hosted WordPress sites with some great updates to the user interface, support for development sites, and more!

Simpler User Interface

We heard you! Jetpack now provides a much simpler user interface that gives you quick and easy access for turning various features on and off with a single click. However, if you want to tinker with individual module settings or configurations like you’re used to, the old Jetpack → Settings page is still there!

New Jetpack UI

Support for Development Sites

If you use a development or staging environment for your Jetpack site or happen to be moving your site to a new URL, you may have previously run into trouble. You probably had to reach out to our wonderful team of Happiness Engineers for help with sorting out the Jetpack issue.

No more!

Now when you move your site (e.g. by cloning a staging site off of your production site or moving from staging to production), Jetpack detects the change and asks you what you’d like to do: Would you like to move to a new address? Is this a totally different site that needs a fresh connection? Or is this a staging site? Whatever your answer Jetpack will now automatically sort itself out under-the-hood for you.

Alongside this, if your site still has trouble and can’t verify the connection with WordPress.com, we attempt to detect that too and alert you so you can take action before, for example, publishing a new post. Now, there will be no more wondering why a new post wasn’t automatically published on Facebook or Twitter!

And More…

Jetpack 3.7 also introduces the new VideoPress player that works on all devices and allows you to paste a VideoPress link to automatically embed videos. Other key changes include:

  • Ability to enable per-post opt-out for Subscriptions by adding one of our new filters to a functionality plugin.
  • A new Widget Visibility rule that allows you to show or hide widgets based on a page’s parent. Need all of your pages in your “About” section to show a certain widget? Now you can!
  • Sharing buttons now display on bbPress forum posts and more.
  • Full changelog can be seen at WordPress.org.

We worked hard to make Jetpack 3.7 a great release for you and your sites and we hope you enjoy it!

A special thank you to all who contributed to Jetpack during the 3.7 development cycle:
Adam Heckler, Alex Kirk, Allen Snook, Andrew Duthie, Ben Lowery, Bernhard Reiter, Bob Ralian, Brandon Hubbard, Brandon Kraft, Brandon Lavigne, Chris Mospaw, Chrissie Pollock, Daniel Homer, Daryl L. L. Houston, David (Lenny) Lenehan, Dennis Snell, Derek Smart, Derek Springer, Donncha Caoimh, Enej Bajgoric, Eoin Gallagher, Eric Binnion, George Stephanis, Gregory Cornelius, Ian Dunn, Igor Zinovyev (Release Lead), jeiseman, Jeff Bowen, Jeff Golenski, Jeremy Herve, Jesse Friedman, Joey Kudish, John Godley, Justin Kropp, Justin Shreve, Kat Hagan, Maciej Gryniuk, Marcus Kazmierczak, Matas Ventura, Micah Ernst, Michael Adams, Michael Cain, Miguel Fonseca, Miguel Lezama, Mohammad (Mo) Jangda, Nancy Thanki, Nathaniel Taintor, Nick Momrik, Paul Schreiber, Richard Muscat, Rocco Tripaldi, Sam Hotchkiss, Tim Moore, Tony Kovanen, Utkarsh, William Turrell, Yoav Farhi.

 

Posted in Releases | Tagged , , , , | Comments Off on Jetpack 3.7 — Simpler UI, Support for Development Sites, and More!

Jetpack 3.6 – Updated Social Widgets, Jetpack CLI, and More!

Jetpack 3.6 has some great updates to the Extra Sidebar Widgets, improvements to Jetpack CLI, introducing a new Jetpack connection interface, and much more! Here’s a little taste of the great things we’ve added in Jetpack 3.6:

Extra Sidebar Widgets Updates

We’ve made some great improvements to a few existing widgets and added a new widget to the Extra Sidebar Widgets in Jetpack.

New: Social Media Icons Widget

socialiconsside

We’ve made it easy for you to add social media icons to your sidebar. Simply add the usernames of your respective social media accounts and we’ll take care of the rest. Once you save your additions, you can see the widget in action in your sidebar!

Currently supported social networks include Facebook, Twitter, Instagram, Pinterest, LinkedIn, GitHub, YouTube, and Vimeo.

Update: Facebook Like Box Widget
We’re excited to bring you a gorgeous new Facebook Like Box Widget! When you upgrade to Jetpack 3.6, you will have access to this new sidebar widget.

The Facebook Widget only works for Facebook Pages. In this widget, it will show your Page’s header image and now you will have the option to list your followers and recent posts to your Page’s Facebook wall as well:

FacebookWidgetSide

This new Facebook Like Box is only available in Jetpack 3.6, so upgrade today to use this great new widget.

We’ve also made some improvements to the Top Posts and Pages and the Display WordPress Posts widgets.

The Display WordPress Posts widget now gives you the option to have links open in a new browser window. The Top Posts and Pages widget now allows you to show/hide different page types from the widget. Only want to show post and page results in your widget? Simply check the boxes for “Posts” and “Pages” in the widget configuration area and save!

Jetpack CLI Improvements

Jetpack CLI is a command line interface for Jetpack, extending off of WP-CLI for WordPress. You can easily modify your Jetpack settings with a just a few simple commands.

JetpackCLI

In Jetpack 3.6, we’ve greatly expanded the number of commands available for you to manage your Jetpack site using WP-CLI. You can read the full list of commands available here on our Jetpack CLI support document.

New Jetpack Connection Management

With this new version of Jetpack, we’ve added a new way for you to manage your Jetpack’s connection to WordPress.com. You’ll see a new button for “My Jetpack” in your menu bar under Jetpack -> Jetpack in your site’s Dashboard.

myJetpack

Clicking this button will take you to a configuration page where you can manage your site’s Primary User, see any other connected users, and/or manage your connection to WordPress.com.

We have plans to add even more features to My Jetpack in future Jetpack releases.

Other Notable Updates

A couple more notable updates in Jetpack 3.6:

  • Jetpack Mobile Theme now supports adding a Featured Image to Gallery Post Format and Pages.
  • Jetpack Protect now offers a captcha in the login flow. If you accidentally trigger Protect by entering the wrong login information, you’ll be given the option to enter your correct username and password with a captcha to prevent being fully locked out.

The full list of updates in Jetpack 3.6 can be seen here on WordPress.org.

Posted in Releases | Tagged , | 15 Comments

Jetpack 3.5: Menu Management

Today we released Jetpack 3.5 which includes the ability to manage your site’s menus directly from WordPress.com as well as several bug fixes and enhancements.

Menu Management

With this version of Jetpack connected, you can manage your site’s menus directly from wordpress.com/sites. This adds to our growing list of centralized site management features such as automatic and bulk plugin updates.

Jetpack Menu Management

How to Update

Visit the Plugins page in your Dashboard and update Jetpack from there. Alternatively, update all your sites in bulk from wordpress.com/plugins/jetpack.

How to Install

You can install Jetpack by visiting our install page or by searching for it in your Plugins page on your dashboard.

Feedback

Please give us your feedback by leaving a comment and letting us know what you love or what you’d like to see in future updates. If you find any bugs or issues, please file a new issue on GitHub, create a new forum post, or simply contact our support team.

Posted in Releases | Tagged | 18 Comments
  • Recent Comments

    Jeremy on Jetpack 4.3 and 4.3.1: A faste…
    Jeremy on Jetpack 4.3 and 4.3.1: A faste…
    Jeremy on Jetpack 4.3 and 4.3.1: A faste…
    Jeremy on Jetpack 4.3 and 4.3.1: A faste…
    Jeremy on Jetpack 4.3 and 4.3.1: A faste…
  • Archives

  • Enter your email address to follow this blog and receive notifications of new posts by email.

  • Install Jetpack to see our lineup of features.

    Install Jetpack Now

    Don’t need all Jetpack’s features? No problem. Only activate what you need!