Here is a tutorial on using the WP-CLi. It has a focus on some of the security related tasks available.

Patchstack announces a free Vulnerability Disclosure Platform for WordPress developers to help them manage disclosures. This will help developers comply with the upcoming EU Cyber Resilience Act.

Here is a great interview with John Blackbourn, who is a member of the WordPress security team.

It has a CVSS Score of 9.9. It seemed that the Wordfence team had a hard time getting a response from On the Go.

Patchstack has started a Patchstack academy resource hub for learning about ethical hacking and security you code.

Vladimír Smitka continues his security testing and education series related to hosting providers, this time looking at PHP configuration issues. Well worth the time to read.

The Plugin Review team has reset the passwords for plugin authors. It appears some recent plugin vulnerabilities may have been the result of password reuse.

Here is another installment in Vladimir Smitka’s series about security and hosting providers. An interesting read.

This updates fixes two cross-site-scripting vulnerabilities and a path traversal issue.