Patchstack reports on a WordPress security cleanup last month of plugins in the directory with vulnerabilities.

This release includes important security fixes, improvements and bug fixes.

This podcast interview with Miriam Schwab and Oliver Sild might be of interest to developers interested in the free Patchstack managed Vulnerability Disclosure Program. They discuss how the program works and how it is of benefit to theme and plugin developers.

An update is available for a security vulnerability. You need to follow instructions for updating due to the ACF team being unable to update the plugin on WordPress org.

Here is a tutorial on using the WP-CLi. It has a focus on some of the security related tasks available.

Patchstack announces a free Vulnerability Disclosure Platform for WordPress developers to help them manage disclosures. This will help developers comply with the upcoming EU Cyber Resilience Act.

Here is a great interview with John Blackbourn, who is a member of the WordPress security team.

It has a CVSS Score of 9.9. It seemed that the Wordfence team had a hard time getting a response from On the Go.

Patchstack has started a Patchstack academy resource hub for learning about ethical hacking and security you code.