[pluginvulns]

It appears you do not know what is going on with WordPress.

The person who ultimately controls what is included in a release of WordPress is the Release Lead. They are an employee of Automattic. We compiled a list of Release Leads going back to 2019: https://www.pluginvulnerabilities.com/2024/10/10/automattics...

It has been Matt Mullenweg 12 of 15 times. The other Release Leads were Josepha Haden Chomphosy and Matías Ventura, who were Automattic employees at the time.

So Automattic obviously does have control and a veto.