WordPress has long had a reputation for poor security. The reality behind that is that many of the claims about poor security are not true and that real security issues haven’t gotten attention or fixes. A recent story at The Repository about the response to Matt Mullenweg’s recent action by core contributors to WordPress helps to explain why things are going wrong. The story anonymously quotes “[v]eteran WordPress core committers and contributors,” painting a rather bad picture of of many of those people.
The most striking comment is this: [Read more]