Security

Timely's All-In-One Event Calendar -- which boasts 100,000 active installs -- had multiple security issues that caused it to be temporarily removed from the repo by the plugin security team. There were at least four disclosed issues, some of which…

If you're using Caldera Forms, there's a security update out for it (although the WordPress security team is pushing an auto update).

If you use PHPStorm (or know someone that does) make sure you read this about a security concern in older versions.

WordFence is spreading the word about three different plugins with security vulnerabilities they've found exploited in the wild. WooCommerce Store Toolkit (not publicly available, patched, but will need updating) WordPress User Meta Manager (on .org, blind SQL injection vulnerability) WP…