Someone bought a plugin to ship malware through its updates. That’s why your commit waits 24 hours now.
WordPress.org’s new 24-hour hold isn’t about slow updates. It’s the moment the trust in commit access broke, and why a security-minded author welcomes being distrusted.
Jun 12, 20265 min read
