THE WORDPRESS SECURITY TEAM IS HIDING THAT THEY ARE FAILING TO FIX KNOWN SECURITY ISSUES IN WORDPRESS

Summary from the TLDR InfoSec newsletter

WordPress' Security Team is not effectively fixing known security issues, lacking transparency and accountability. Despite claims of a large team, details about their members remain hidden. Some security issues, like SSRF vulnerability, have gone unaddressed for years without clear plans for resolution.