We read 6 weeks of WordPress plugin releases: 21% of security fixes were silent

A recent analysis of WordPress plugin releases over a six-week period found that 21% of security fixes were not publicly disclosed. This suggests that a significant portion of vulnerabilities in WordPress plugins are being addressed without notification to users. The analysis was conducted to identify vulnerabilities that other scanners may miss. The findings are discussed in a blog post on WordPress plugin vulnerabilities. The post is available for review and discussion.