Elementor Drives the Growth of WordPress as 7% of All WordPress Sites Are Now Built With the Platform

Elementor, the leading WordPress website builder platform, today announced that 7% of all WordPress websites are built using Elementor. Founded in 2016, Elementor's growth has continued to accelerate. While it took two years to reach its first million websites, this latest one million milestone took just over three months to achieve with over five million websites using its code-free, drag-n-drop platform. Major business and media sites including the New Yorker, TripAdvisor, Vogue, Crunchbase and GrubHub now use Elementor.

With the impact of the coronavirus forcing many businesses online, there has been a 32% increase in website building demand since the outbreak of the global pandemic in the US alone. The high adoption rate of Elementor is driving growth to the WordPress open-source movement,  as over 30% of Elementor users are new to WordPress and are using it for the first time.

"Over a third of the websites in the world run on WordPress and Elementor is increasingly responsible for WordPress' dominance," says Elementor CEO, Yoni Luksenberg. "Our goal of enabling professional web creators to easily and painlessly build stunning websites according to their specific needs is being fulfilled as an amazing community has grown around our platform. Furthermore, to see that we are actually converting unaffiliated users to the WordPress community is very important to us as we become the de facto way for web creators to build WordPress websites."

In a move designed to support its users in a time of crisis, Elementor recently announced an early launch of its Experts network which empowers the members of its global community to capture the current high level of demand. Additionally, it enables them to collaborate and grow their businesses by sharing their portfolios and services with Elementor peers in 152 countries. The network has received strong early feedback from users all across the world who have already closed deals through connections made on the platform.

Another indicator of the appreciation that Elementor has received from the WordPress community was recently seen with its second straight championship win in the annual Torque Magazine Plugin Madness bracket. Elementor came out on top of a field of 64 nominated plugins (out of 55,000 WordPress plugins) winning 82% of the popular vote in the final round.

This story originally appeared at PRNewswire.

WordPress Update 5.4.1

WordPress Update 5.4.1

Posted April 29, 2020 by Jake Spurlock. Filed under Releases, Security.

WordPress 5.4.1 is now available!

This security and maintenance release features 17 bug fixes in addition to 7 security fixes. Because this is a security release, it is recommended that you update your sites immediately. All versions since WordPress 3.7 have also been updated.

WordPress 5.4.1 is a short-cycle security and maintenance release. The next major release will be version 5.5.

You can download WordPress 5.4.1 by downloading from WordPress.org, or visit your Dashboard → Updates and click Update Now.

If you have sites that support automatic background updates, they’ve already started the update process.

Security Updates

Seven security issues affect WordPress versions 5.4 and earlier. If you haven’t yet updated to 5.4, all WordPress versions since 3.7 have also been updated to fix the following security issues:

  • Props to Muaz Bin Abdus Sattar and Jannes who both independently reported an issue where password reset tokens were not properly invalidated.
  • Props to ka1n4t for finding an issue where certain private posts can be viewed unauthenticated.
  • Props to Evan Ricafort for discovering an XSS issue in the Customizer
  • Props to Ben Bidner from the WordPress Security Team who discovered an XSS issue in the search block.
  • Props to Nick Daugherty from WordPress VIP / WordPress Security Team who discovered an XSS issue in wp-object-cache.
  • Props to Ronnie Goodrich (Kahoots) and Jason Medeiros who independently reported an XSS issue in file uploads.
  • Props to Weston Ruter for fixing a stored XSS vulnerability in the WordPress customizer.
  • Additionally, an authenticated XSS issue in the block editor was discovered by Nguyen The Duc (ducnt) in WordPress 5.4 RC1 and RC2. It was fixed in 5.4 RC5. We wanted to be sure to give credit and thank them for all of their work in making WordPress more secure.

Thank you to all of the reporters for privately disclosing the vulnerabilities. This gave the security team time to fix the vulnerabilities before WordPress sites could be attacked.

For more information, browse the full list of changes on Trac, or check out the version 5.4.1 HelpHub documentation page.

In addition to the security researchers mentioned above, thank you to everyone who helped make WordPress 5.4.1 happen:

Alex Concha, Andrea Fercia, Andrew Duthie, Andrew Ozz, Andy Fragen, Andy Peatling, arnaudbroes, Chris Van Patten, Daniel Richards, DhrRob, Dono12, dudo, Ehtisham Siddiqui, Ella van Durpe, Garrett Hyder, Ian Belanger, Ipstenu (Mika Epstein), Jake Spurlock, Jb Audras, John Blackbourn, John James Jacoby, Jonathan Desrosiers, Jorge Costa, K. Adam White, Kelly Choyce-Dwan, MarkRH, mattyrob, Miguel Fonseca, Mohammad Jangda, Mukesh Panchal, Nick Daugherty, noahtallen, Paul Biron, Peter Westwood, Peter Wilson, pikamander2, r-a-y, Riad Benguella, Robert Anderson, Samuel Wood (Otto), Sergey Biryukov, Søren Brønsted, Stanimir Stoyanov, tellthemachines, Timothy Jacobs, Toro_Unit (Hiroshi Urabe), treecutter, and yohannp.