Bad actors purchased popular plugins hosted on WordPress.org and added malware that was downloaded to users sites.

You may have noticed the Ollie Menu Designer and other newer plugins showing up first when you go to install a plugin. This is new and part of a move to help “hidden gems” get discovered.

This is a presentation given at Drupal Con about the WordPress conflict. There are a lot of comparisons between the projects that people might find interesting.

And the controversy continues! Checkout the new WordPress org login form. I hope you like pineapple on pizza.

Patchstack reports on a WordPress security cleanup last month of plugins in the directory with vulnerabilities.

If a site has a plugin installed that was closed in the WP plugin directory there is no notice in the site admin, which could be a security issue. The WordPress org Experiments plugin adds the notice in the admin that users would see if they were on the dot org site.

Mary Hubbard is the new Executive Director of the WordPress.org.

Here is a great post from Joost that provides some insight into the current conflict with WP Engine.

The html-tag-processor is a core WordPress class used by developers to find and modify attributes in an HTML document. This article discusses its benefits and performance. The article is more of an informational summary than a tutorial.