Patchstack's @maciekpalmowski.dev explains why "WordPress core is secure" stopped being true, and what AI-driven vulnerability research means for site owners now.
communitycode.dev
Maciek Palmowski and the five-hour zero-day
For years, the standard line on WordPress security was: core is secure, it’s the plugins you have to worry about. Maciek Palmowski — grown-up Spectrum kid, current growth engineer at Patchstack, and newly minted conference organizer — is here to tell you that line doesn’t hold anymore. AI-assisted research just found real vulnerabilities in WordPress […]