State-of-the-art semantic personal publishing platform
pkg audit for the packaged version 7.1.3_1,1.| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-87902 | 8.1 | 2026-09-22 | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If … |
no CVE referenced
{french,german,russian}/wordpress: chase upstream distfile re-roll
Upstream re-rolled the 7.1.3 de_DE, fr_FR and ru_RU tarballs again
with refreshed translations under wp-content/languages. The
WordPress core files are unchanged.
Update distinfo and bump PORTREVISION as package contents changed.c198d2b9c3{french,german}/wordpress: chase upstream distfile re-roll
Upstream re-rolled the 7.1.3 fr_FR and de_DE tarballs: the bundled
twentytwentytwo theme was dropped (matching the en_US distfile) and
the fr_FR translations were refreshed. The WordPress core files are
unchanged.
Update distinfo and bump PORTREVISION as package contents changed.3f66a201d2{www,french,german,japanese}/wordpress: update to 7.1.3
Remove IGNORE from french/wordpress as the localized distfile is
available again.dfcba97134*/wordpress: update to 7.1.1 Mark chinese/wordpress-zh_CN, french/wordpress, and russian/wordpress IGNORE as localized distfiles are not yet available upstream.6ccbb66394
*/wordpress*: update to 7.1 chinese/wordpress-zh_TW is temporarily marked IGNORE as the localized distfile is not yet available upstream. Also fix MASTER_SITES for zh_TW to use tw.wordpress.org instead of cn.wordpress.org.7bcf4597e7
*/wordpress*: upgrade to 7.0.3. Also fix variable ordering issues flagged by portlint/portclippy and reformat with portfmt.ea4ed552c5
*/wordpress*: upgrade to 7.0.26d99a569fc
*/wordpress*: upgrade to 7.0.1cfa3edaf24
*/wordpress*: upgrade to 7.0 WordPress 7.0 "Billie" ships localized tarballs directly, so drop the 6.9.1+patch workaround and return to the clean DISTVERSION approach.4c57fc4a2f
www/wordpress: upgrade to 6.9.1 Take maintainership4ffaf3d60d
*/wordpress*: Upgrade to WordPress 6.9 "Gene" This release introduces major collaboration features, developer APIs, and performance improvements. Key Changes: * Collaboration: Introduced "Notes" for block-level commenting and feedback directly in the editor. * Dashboard: Expanded Command Palette to support navigation and actions across the entire admin interface. * APIs: Added the Abilities API to standardize permissions for AI and automation workflows. * Design: Added "Fit text to container" typography option for Paragraph and Heading blocks. * Performance: Improved LCP with on-demand block styles, optimized database queries, and refined caching. * Accessibility: Fixed over 30 issues related to screen readers, focus handling, and assistive tech. * UI/UX: Enhanced visual drag-and-drop and introduce new blocks (Accordion, Terms Query) Release notes: https://wordpress.org/news/2025/12/gene/ MFH: 2025Q4f660a0d5ee
*/wordpress*: Update 6.8.2 => 6.8.3 (with security fixes) Security updates included in this release: * A data exposure issue where authenticated users could access some restricted content. * A cross-site scripting (XSS) vulnerability requiring an authenticated user role that affects the nav menus. Release notes: https://wordpress.org/news/2025/09/wordpress-6-8-3-release/ PR: 290366 288378 Approved by: joneum (maintainer) MFH: 2025Q4cad1820083
*/wordpress*: Update to 6.8.2 PR: 288378 Sponsored by: Netzkommune GmbH9ce8cb11e2
*/wordpress*: Update to 6.8.1 Changelog: https://wordpress.org/news/category/releases/ Sponsored by: Netzkommune GmbH4d4f3fd183
*/wordpress*: Update to 6.7.2 Changelog: https://wordpress.org/news/category/releases/ PR: 284788 Sponsored by: Netzkommune GmbHd66a556cd4
*/wordpress*: Update to 6.6.1 Changelog: https://wordpress.org/news/category/releases/ Sponsored by: Netzkommune GmbHffbdde63be
*/wordpress: Update to 6.4.4 Approved by: joneum (implicit) MFH: 2024Q2 Security: ea4a2dfc-f761-11ee-af2c-589cfc0f81b0503a518f54
*/wordpress*: Update to 6.4.3 Changelog: https://wordpress.org/news/category/releases/ Sponsored by: Netzkommune GmbH8670067fc2
*/wordpress*: Update to 6.2.2 Sponsored by: Netzkommune GmbHdd504c5d93
*/wordpress*: Update to 6.1.3 Sponsored by: Netzkommune GmbH77b7aa3bf8
www/wordpress: Transform into master port * Simplify language ports * Removes differences in pkg-message and pkg-descr * Reduce files to manage on updates6beccad94e
*/wordpress*: Update to 6.1.1 Changlog: https://wordpress.org/news/2022/11/wordpress-6-1-1-maintenance-release/ Sponsored by: Netzkommune GmbH6ed8ddae0c
*/wordpress*: Update to 6.0.3 Sponsored by: Netzkommune GmbHc783ffdd63
*/wordpress*: Update to 6.0.2 Changelog: https://wordpress.org/news/2022/08/wordpress-6-0-2-security-and-maintenance-release/ Sponsored by: Netzkommune GmbHf716c18b2e
*/wordpress*: Update to 6.0.1 Changelog: https://wordpress.org/news/2022/07/wordpress-6-0-1-maintenance-release/ Sponsored by: Netzkommune GmbH3ae94f9fed
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
french: remove 'Created by' lines A big Thank You to the original contributors of these ports: * Andreas Fehlner (fehlner@gmx.de) * Dan Phillips <dan-ports@dp.id.au> * Elvis Chiang <elvis@sslab.cs.ccu.edu.tw> * Frederic Culot <frederic@culot.org> * Thierry Thomas <thierry@pompo.net> * janos.mohacsi@bsd.hu * thierry@pompo.net With hat: portmgr0c7138cb67
*/wordpress*: Update to Version 6.0 Welcome to “Arturo” Say hello to “Arturo” and WordPress 6.0, inspired by Grammy-winning jazz musician, Arturo O’Farrill. Known for his influence on contemporary Latin jazz, Arturo has pressed more than 15 albums spanning a body of work across five decades. Take some time to explore WordPress 6.0, built to help you unlock your creative aspirations and make your site-building experience more intuitive. And check out some of Arturo’s inspirational sounds that span Afro Cuban jazz, contemporary Latin jazz, and so much more. With nearly 1,000 enhancements and bug fixes, the second major release of 2022 is here. Download it now! As of today, WordPress powers more than 42% of websites worldwide.1 Site owners and administrators should upgrade to take full advantage of the many stability, performance, and usability enhancements today. WordPress content creators will enjoy a suite of new features geared toward improving the writing and designing experiences. Full Changelog see: https://wordpress.org/news/2022/05/arturo/ Sponsored by: Netzkommune GmbHf526cbc7a9
*/wordpress*: Update to 5.9.3 Sponsored by: Netzkommune GmbH0fa601ef4e
*/wordpress*: Update to 5.9.2 Changelog: https://wordpress.org/news/2022/03/wordpress-5-9-2-security-maintenance-release/ Sponsored by: Netzkommune GmbH1938dcf6c1
*/wordpress*: Update to 5.9.1 Changelog: https://wordpress.org/news/2022/02/wordpress-5-9-1-maintenance-release/ PR: 262184 Reported by: takefu@airport.fm Sponspred by: Netzkommune GmbH4c2b021375
*/wordpress: Update distinfo PR: 261838 Sponsored by: Netzkommune GmbH794401dda4
www/wordpress: Security update to 5.9 * and language versions PR: 261460 Security: 79b65dc5-749f-11ec-8be6-d4c9ef517024 MFH: 2022Q1c600bbae3a
*/wordpress*: Update to 5.8.2 For all languages: Make the port portlint(1),portclippy(1) compliant. For www,french,german,japanese,russian: Fix pkg-message.in to only show upgrade message when upgrading. For www,zh_CN,zh_TW,french,german: Use do-install-DOCS-on for documentation. For zh_CN,zh_TW: Add CPE information PR: 260013 Approved by: maintainer timeoutc44d822e8d
french/wordpress: Fix fetch. The sha1 checksum matches the upstream one: https://fr.wordpress.org/wordpress-5.8-fr_FR.tar.gz.sha1 PR: 259318 Approved by: portmgr (build fix blanket)1f16c57100
*/wordpress-*: Update to 5.8 Changelog: https://wordpress.org/news/2021/07/tatum/ Sponsored by: Netzkommune GmbHe733aee75a
french/wordpress: Update to 5.5.5 Sponsored by: Netzkommune GmbH1538211eb1
Remove # $FreeBSD$ from Makefiles.305f148f48
wordpress: Update to 5.5.3 Changlogs: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://wordpress.org/news/2020/10/wordpress-5-5-3-maintenance-release/ MFH: 2020Q4 (with hat) Security: 11325357-1d3c-11eb-ab74-4c72b94353b5 Sponsored by: Netzkommune GmbH5a10d19e80
Mark BROKEN Reported by: pkg-fallout99b5e9eda2
Update to 5.5.1 Sponsored by: Netzkommune GmbH615d28c8e6
Update to 5.4.2 Changelog: https://wordpress.org/news/2020/04/wordpress-5-4-1/ Reported by: delphij MFH: 2020Q2 Sponsored by: Netzkommune GmbH Differential Revision: https://reviews.freebsd.org/D25262913fdd7975
Update to 5.3.3 Add php-json support [1] PR: 244382 [1] Sponsored by: Netzkommune GmbHa4f898ee25
Update to 5.3.2 Changelog: https://wordpress.org/news/ MFH: 2019Q4 Security: 7b97b32e-27c4-11ea-9673-4c72b94353b5 Sponsored by: Netzkommune GmbH527ebbd684
Update to 5.2.4 Changelog: https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/ MFH: 2019Q4 Security: 459df1ba-051c-11ea-9673-4c72b94353b5 Sponsored by: Netzkommune GmbH3acbf88ca7
Mark a few ports BROKEN, unfetchablecc8ad7de9b
Wordpress: Update to 5.2.3 changelog: https://wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/ MFH: 2019Q3 Security: 8a9f86de-d080-11e9-9051-4c72b94353b5 Sponsored by: Netzkommune GmbH2e99ed7bc3
Convert to UCL & cleanup pkg-message (categories e-g)79698c8457
Update to 5.2.2 Changelog: https://wordpress.org/news/2019/06/wordpress-5-2-2-maintenance-release/ Sponsored by: Netzkommune GmbHa96e3271dc