​WordPress: Why we didn't tell you about a big zero-day we fixed last week

WordPress has revealed a serious flaw that it secretly fixed in last week's security update.