#WordPress Contributors and Community Leaders Call for Governance Reform in Rare Open Letter

via @therepository

In yesterday’s post for our plugin advent calendar, we featured @dvk’s Plugin Koko Analytics. If you’re running a #WordPress site and are interested in GDPR-compliant usage tracking, this might be for you.

https://kraut.press/2024/koko-analytics/

In an essay, our guest author, Hendrik Luehrsen, pondered whether WordPress’s current strategy of adding more and more features to WordPress core is sustainable.

The Making WordPress Slack Workspace now requires SSO with your WordPress.org account. As of now, there is no official statement regarding this change. 🤔

After @josephahaden left Automattic last week, Matt Mullenweg now announced Mary Hubbard as the new Executive Director of the WordPress Project.

See Matt’s post on WordPress.org

Earlier today, the WordPress.org team reset the passwords for every WordPress.org user account with author or committer access to a plugin.

In addition, new plugin submissions to the directory are halted, and all commits have to be approved by the plugin team for the time being.

Announcement on WordPress.org

Earlier this week, the team of the security tool Wordfence reported a supply chain attack affecting five plugins in the WordPress.org directory. In a follow-up post, WordFence’s Chloe Chamberland explains the attack vector: reused WP.org user passwords.

WordPress.org security advisory