Welcome back to the Patchstack Weekly security update! It is the beginning of February and this update is for the fifth week of 2022.

This week I will share some of the core principles of open-source software development and how security researchers participate in them, as well explaining why open source projects should always have a vulnerability disclosure policy and what makes a good vulnerability disclosure policy.

This week in WordPress component patches news, there are three critical vulnerabilities I will highlight in three plugins: So let's get into it.