Certificate Transparency data is used to compromise WordPress before installation

Wp-SQLite: WordPress running on an SQLite database

Hackers Are Exploiting WordPress Tools to Hawk Scams

Things I’d want to see improved in WordPress core

WordPress sites getting hacked ‘within seconds’ of TLS certificates being issued

What are you doing, WordPress.com?

Ukraine targeted by DDoS attacks from compromised WordPress sites

A technique to semi-automatically find vulnerabilities in WordPress plugins

The Complicated Futility of WordPress

WordPress to Wagtail CMS Migration Kit