WordPress 3.1.2 has been released.

This release addresses a vulnerability that allowed Contributor-level users to improperly publish posts.

The issue was discovered by a member of our security team.

We suggest you update to 3.1.2 promptly, especially if you allow users to register as contributors or if you have untrusted users. This release also fixes a few bugs that missed the boat for version 3.1.1.

The official WordPress announcement

3.1.2 Codex Details

Change Details

A list of the modified files (between WordPress 3.1.1 and 3.1.2)

Download 3.1.2 (entire installation)

Download 3.1.2 (just the changed files between 3.1.1 and 3.1.2)

A paint brush, yesterday

A week ago I mentioned how I’m rather quiet, mainly working on a massive update to my YouTube Embed plugin.

Well, my original excuse of looking at moving house is still valid – mine goes on the market this week, so I’m busy painting, cleaning and anything else I can think of (oh, how my knees hurt!). And it’s my birthday this weekend, so there’s some preparation around that (lots of people coming to the house for a day-long party). Of course, once that’s over I’ll be ordering my PS3 and be engrossed in that. However, I hope normality will return soon afterwards.

The YouTube Embed changes are bigger than I thought – simply modifying the original code has become far too unwieldy so I’m going to be looking at completely re-writing the “back end”, as well as trying to come up with creative solutions to keep the code easier to maintain.

Update 14/04/2011

After a review of YouTube Embed on the Yoast website, I now have even more work to do! Joost has provided me with lots of suggestions for improvement. BTW, only 3.5 out of 5 stars but the best YouTube plugin he’s reviewed so far

Oh, and after a house evaluation it would appear my painting of the kitchen was a success – the house price has gone up £5k since it was valued last year and they said it “looked like new”

I’ve been offering free, and usually quite quick, support for my WordPress plugins since introducing them.

At first people used the comments at the bottom of the plugin pages but it’s not the best method to use so at the beginning of the year I closed these and added a forum to the site. Unfortunately, lots of users have signed up but nobody has used it. Instead, I am receiving all my support queries via email.

The problem with email, of course, is that it’s a poor way of sharing information, or requesting from a wider audience. Indeed, many of the support emails that I do receive are asking questions that others have already asked. Either that or the person is rude or simply doesn’t respond to responses.

In a nutshell, it can be a bit of a time waster.

I’ve therefore decided to stop answering WordPress plugin support queries via my contact form and will now insist that the forum is used.

I thank everyone for their understanding.