WordPress forces user conf organizers to share social media credentials, arousing suspicions

'I can't run a business like this': Why the WordPress row matters

"WordPress.org is not WordPress" [pdf]

Over 6,000 WordPress hacked to install plugins pushing infostealers