There is too much bad stuff going around about WordPress, but more keeps leaking out. Here is a thread on X that shows the data collected by WooCommerce … the extent of which is way over the top

The entire Patchstack app is now available as an API for free for people on their Developer plan. This allows for the integration of Patchstack with your own workflow and automations.

Patchstack reports on a WordPress security cleanup last month of plugins in the directory with vulnerabilities.

This release includes important security fixes, improvements and bug fixes.

This podcast interview with Miriam Schwab and Oliver Sild might be of interest to developers interested in the free Patchstack managed Vulnerability Disclosure Program. They discuss how the program works and how it is of benefit to theme and plugin developers.

An update is available for a security vulnerability. You need to follow instructions for updating due to the ACF team being unable to update the plugin on WordPress org.

Here is a tutorial on using the WP-CLi. It has a focus on some of the security related tasks available.

Patchstack announces a free Vulnerability Disclosure Platform for WordPress developers to help them manage disclosures. This will help developers comply with the upcoming EU Cyber Resilience Act.

Here is a great interview with John Blackbourn, who is a member of the WordPress security team.