Stable v2.6.27 — Security

• chore(api): remove orphaned wp_vulnfeed_worker.go (deletion was never committed)
• fix(wordpress): CVE feed stored nothing — tolerate array-shaped operator/impact