Patchstack reports 404 vulnerabilities in WordPress plugins, Learn WordPress releases new content, and a cautionary tale on hiring without a contract.