Automattic has started cutting staff over the past week, hitting its communications team, social media team, WordPress.com, and its VIP enterprise business, with insiders telling TechCrunch more cuts are expected. The layoffs follow a chaotic period at the company that included a failed board attempt to oust CEO Matt Mullenweg in September, a complete board turnover, and departures of its CFO, interim CFO and Chief Legal Officer.
techcrunch.com
· 2026-10-21
Hackers are exploiting an unauthenticated file-upload vulnerability (CVE-2026-27540) in the WooCommerce Wholesale Lead Capture plugin for WordPress, versions 2.0.3.1 and earlier, to install PHP webshells. Wordfence says its firewall has blocked over 100,000 attack attempts, with spikes in June, July and August, and the shells allow attackers to gather site information and upload further malicious files.
bleepingcomputer.com
· 2026-09-15
Sources tell TechCrunch that Automattic's board has been dissolved following a failed attempt last week to place CEO Matt Mullenweg on paid leave. Founding CEO Toni Schneider reportedly resigned his board seat, while Mullenweg removed remaining members Sue Decker and Gen. Ann Dunwoody. Automattic has not confirmed specifics but acknowledged in a statement that people have left the company.
techcrunch.com
· 2026-09-14
GoKawiil