v2026.07.27.14 – v2026.07.28.01 — 2026-07-28

• fix(wp-toolkit): security tab table now lists core + theme CVEs, not only plugins