WordPress (Developer)
Recent Changes
Update openid-connect-generic to 3.11.3
Add configurable issuer setting for JWT validation by @daggerhart in #639
Fix JWT verification with Microsoft Entra ID JWKS by @daggerhart in #636
629: Fix to better match issuer in jwt validator by @daggerhart in #630
Previous versions decoded JWT tokens without cryptographic verification
Added proper JWT signature verification using JWKS (JSON Web Key Set)
Implements
firebase/php-jwtlibrary for validationValidates all required claims:
exp,aud,iss,iat,subAdded signature verification for aggregated claims from secondary JWTs
Prevents injection of forged claims
Replaced unsafe HTTP functions with SSRF-protected alternatives
WordPress (Developer) package gives you complete control over your WordPress installation. Unlike the WordPress (Managed) package, core WordPress files are editable. Because the core files are editable, you have to keep WordPress updated from the WP Admin dashboard. Some salient features are:
- Supports all migration plugins. Use this package to migrate your existing site into Cloudron.
- Make changes to WordPress via SFTP or the File Manager.
- Supports all WordPress security plugins like WordFence.
- Update WordPress from inside WordPress' admin dashboard.
About
WordPress is web software you can use to create a beautiful website or blog. We like to say that WordPress is both free and priceless at the same time.
The core software is built by hundreds of community volunteers, and when you’re ready for more there are thousands of plugins and themes available to transform your site into almost anything you can imagine. Over 60 million people have chosen WordPress to power the place on the web they call “home” — we’d love you to join the family.
Apps
Install WordPress (Developer) in a few minutes on your server with Cloudron. To install Cloudron first, follow our setup steps.