What’s in it
A single week can bring more than 300 new WordPress vulnerabilities. Most of them sit in tiny plugins or need an admin login before anyone can use them, which means they’ll never touch a typical business site, so the email leaves them out.
Each issue leads with up to five that matter and lists up to ten more in a table. For the lead items you get what the flaw lets an attacker do, which versions are affected, and the update that fixes it. If attackers are already using one, it goes first and says so.
The items come from the National Vulnerability Database, CISA’s catalog of exploited vulnerabilities, and WordPress.org. Paul reads every issue before it goes out.
What we keep
Your email address, and the dates you signed up, confirmed, and unsubscribed. The signup form also holds on to your IP address for an hour, to slow down spam. The emails have no tracking pixels, and every one ends with an unsubscribe link that works in one click.
