A private Slack channel, 24 hours' notice, and strict information-sharing rules. How the WordPress project coordinated industry-wide defenses before going public with two vulnerabilities. 🔗 https://www.therepository.email/wordpress-7-0-2-patches-rare-pre-authentication-rce-as-hosts-cdns-get-24-hour-head-start