The Patchstack team has collected and analyzed all the 2025 data about the security of the WordPress ecosystem. Their our annual report shows that attackers are getting more sophisticated, it is getting harder to clean sites, and mention is made of the fact that security procedures may need to change given the rise of AI custom code.