-
General
-
- How to Find the Latest Versions of PublishPress Plugins
- Changelogs for Free PublishPress Plugins
- Changelogs for PublishPress Authors
- Changelogs for PublishPress Blocks
- Changelogs for PublishPress Capabilities
- Changelogs for PublishPress Checklists
- Changelogs for PublishPress Future
- Changelogs for PublishPress Permissions
- Changelogs for PublishPress
- Changelogs for PublishPress Revisions
- Changelogs for PublishPress Series
-
PublishPress Authors
-
- Legacy: How to Create Custom Author Layouts
- Legacy: Add Data in Custom Author Layouts
- Legacy: Using Conditionals in Custom Author Layouts
- Legacy: Add CSS in Custom Author Layouts
- Legacy: The Loop Object in PublishPress Authors
- Legacy: Add External Data to PublishPress Authors
- Legacy: Modify the Author Avatar
- Legacy: Where are Author Layouts Stored in the Database?
- Legacy: Add Social Links to Author Profiles
- Deprecated Functions in PublishPress Authors
-
PublishPress Blocks
-
- Accordion Block
- Button Block
- Columns Block
- Contact Form Block
- Content Display Block
- Countdown Block
- Count Up Block
- Icon Block
- Image Block
- Images Slider Block
- Info Box Block
- Feature List block
- List Block
- Login & Register Block
- Map Block
- Newsletter Block
- Pricing Table block
- Search Bar Block
- Social Links Block
- Table of Contents Block
- Table Block
- Tabs Block
- Testimonial Block
- Video Block
- Woo Products Block
- Core Blocks
- Layout Options in PublishPress Blocks
-
PublishPress Capabilities
-
- The Admin Menus Screen
- Control Access to WooCommerce Admin Menus
- Control Access to Contact Form 7 Admin Menus
- Control Access to Yoast SEO Admin Menus
- Control Access to Elementor Admin Menus
- Control Access to Jetpack Admin Menus
- Control Access to WPForms Admin Menus
- Control Access to The Events Calendar Admin Menus
- Control Access to Gravity Forms Admin Menus
-
PublishPress Checklists
-
- Number of characters in title
- Numbers of words in content
- Number of categories
- Number of tags or taxonomy terms
- Number of characters in excerpt
- Number of internal links in content
- Number of external links in content
- All links use a valid format
- ALT Text for all images
- Featured image
- Latin characters in permalink
- Approved by a user in this role
- Yoast SEO tasks
- WooCommerce product tasks
- Featured image height and width
-
PublishPress Future
- Introduction to PublishPress Future
- Ways to Expire Posts
- Defaults for Post Types
- PublishPress Future Email Notifications
- Shortcodes to Show Expiration Date
- Automatic Footer Display for Expiry Dates
- Scheduling in PublishPress Future: Cron Jobs
- Technical Details for PublishPress Future
- Troubleshooting in PublishPress Future
-
PublishPress Permissions
-
- Control Access to Custom Post Types
- Control Viewing Access to Specific Categories
- Allow Editing of Specific Pages
- Force Users to Create Posts in a Category or Parent Page
- Block Users from Seeing Non-Editable Posts
- Control Viewing Permissions for WordPress Content
- Control Editing Permissions for WordPress Content
- Block Access to WordPress Category and Tag Archives
- Configure Who Can See Other People's Posts
-
- Developer Information for Permission Groups
- PublishPress Permissions Database Tables and Settings
- pp_create_group()
- pp_delete_group()
- pp_get_group()
- pp_get_group_by_name()
- pp_get_metagroup
- pp_get_groups()
- pp_get_group_members()
- pp_get_groups_for_user()
- pp_add_group_user()
- pp_remove_group_user()
- pp_update_group_user()
- ppc_get_roles()
- ppc_assign_roles()
- ppc_get_exceptions()
- ppc_assign_exceptions()
-
PublishPress Planner
-
- Getting Started With Notifications in PublishPress Planner
- Understanding the PublishPress Planner Notification Options
- Get PublishPress Planner Notifications by Email or Slack
- How to Customize PublishPress Planner Notifications With Shortcodes
- How to Use Reminder Notifications
- Notify Me: Manually Add Yourself to Notifications
- The PublishPress Planner Notifications Log
- Hooks and Filters for Notifications
- Troubleshooting Email Notifications in PublishPress Planner
-
PublishPress Revisions
-
- Does My Plugin Support PublishPress Revisions?
- A List of Some Plugins Supported by PublishPress Revisions
- PublishPress Revisions Pro and The Events Calendar
- PublishPress Revisions Pro and WooCommerce
- PublishPress Revisions Pro and Advanced Custom Fields
- PublishPress Revisions Pro and WPML
- PublishPress Revisions Pro and Custom Post Type UI
- PublishPress Revisions Pro and Yoast SEO
- PublishPress Revisions Pro and the PODS Framework
- Submit and Moderate Revisions with the Divi Theme
- Create Revisions Using an API
- PublishPress Revisions Pro and Elementor
- PublishPress Revisions Pro and Beaver Builder
-
PublishPress Series
-
How-to Guides
-
- A WordPress Editorial Workflow for Writing, Reviewing and Publishing
- A WordPress Workflow for Editing and Reviewing
- Create a Workflow for University Departments in WordPress with PublishPress
- Create a Multi-Step Workflow in WordPress
- How to Create a Publishing Workflow for Authors in WordPress
- How to Get 2 People to Approve Content in WordPress
-
- How to Allow WordPress Admin Area Access for WooCommerce Users
- How to Manage Permissions for WooCommerce Products
- Allow WooCommerce Users to Edit Only One Product
- How to Approve and Schedule Changes to WooCommerce Products
- WooCommerce Users Can Edit Products Only in Some Categories
- How Create WooCommerce Users Who Can Only View and Edit Products
- How to Create and Schedule Revisions for WooCommerce Products
- How to Control Who Can Duplicate WooCommerce Products
- Create WooCommerce Users Who Can Only View Reports
- How to Control Who Can Access WooCommerce Coupons
- How to Create WooCommerce Users Who Can Only View and Edit Orders
- How to Manage Permissions for WooCommerce Orders
- How to Control Permissions for WooCommerce Refunds
- How to Create Checklists with WooCommerce
-
-
WordPress Permissions
-
- activate_plugins
- add_users
- create_users
- delete_others_pages
- delete_others_posts
- delete_pages
- delete_posts
- delete_plugins
- delete_private_pages
- delete_private_posts
- delete_published_pages
- delete_published_posts
- delete_themes
- delete_users
- edit_dashboard
- edit_others_pages
- edit_others_posts
- edit_pages
- edit_plugins
- edit_posts
- edit_private_pages
- edit_private_posts
- edit_published_pages
- edit_published_posts
- edit_theme_options
- edit_themes
- edit_users
- erase_others_personal_data
- export
- export_others_personal_data
- import
- install_plugins
- install_themes
- list_users
- manage_categories
- manage_links
- manage_options
- manage_privacy_options
- moderate_comments
- promote_users
- read
- read_private_pages
- read_private_posts
- remove_users
- switch_themes
- unfiltered_html
- unfiltered_upload
- update_core
- update_plugins
- update_themes
- upload_files
Security Issues and How to Report Them
We do our best at PublishPress to solve all security issues. We aim to develop, test, release and announce patches as quickly as possible after issues have been discovered.
Full details are available to customers and other trusted parties on request.
How to report a security issue
If you have discovered a vulnerability in a PublishPress plugin, we want to hear from you as soon as possible.
Please gather as much information together as you can so we can work quickly to address it. Here’s a checklist of the details we’d like to see.
- Severity (high, medium, low)
- Vulnerability type: e.g., DoS, Overflow, XSS, CSRF, etc
- Exploitation Requires Authentication?: yes/no
- Which plugin is vulnerable and which version numbers.
- A description of the vulnerability
- Do you have reason to believe the vulnerability is being exploited?
- Are details of an exploit publicly available? If so, please provide us with a URL.
- What is the potential impact? How do you envisage it being used in an attack scenario?
- DREAD score, if known.
- CVE Identifier / Reference / Advisory Number, if applicable.
- If you wish to be credited for the responsible disclosure in the release announcement and the change log, please let us know. If you plan to disclose details of the vulnerability, please do let us know so we can coordinate the timing of the disclosure together.
- Any additional comments.
If you are a customer please open a support ticket as soon as possible and make it clear in the subject that you are reporting a security vulnerability.
If you are not a customer, send all the details to [email protected]
We’ll acknowledge receipt as soon as we’ve read it. If confirmed we’ll plan a patch and let you know when we plan to release it.
Responsible disclosure of issues
Sometimes security researchers have contacted us to disclose a security vulnerability. In these cases, it’s understandable that the researcher might want to publish details of the discovery themselves.
We do expect researchers to respect the principles of responsible disclosure and to work with us to coordinate the content and timing of the public disclosure so customers are given a reasonable opportunity to update their sites.