Patchstack’s Sponsorship Rejection for WordCamp Europe 2025 Sparks Controversy Over Contribution Criteria

Patchstack, a prominent player in WordPress security, has been denied sponsorship for WordCamp Europe (WCEU) 2025, a decision that has ignited significant controversy within the WordPress community. The rejection was based on what the WordPress Community Team described as a lack of “significant contributions” to the WordPress project, raising questions about the transparency and fairness of the sponsorship process.

The rejection email, authored by Felipe Santos, outlined a shift in sponsorship criteria, emphasizing contributions to WordPress over the previous first-come, first-served model. Santos encouraged Patchstack to pledge to the Five for the Future (FFtF) initiative to demonstrate its commitment to the ecosystem and build trust within the community. He further stated that Patchstack’s eligibility for sponsorship could be reevaluated once sufficient contributions were established.

Patchstack CEO Oliver Sild expressed disappointment and pointed out inconsistencies in the process. He noted that slots remained open in the sponsorship tier they applied for and highlighted that other companies without active FFtF contributions were approved after their rejection. Sild emphasized Patchstack’s extensive contributions to WordPress security, including publishing 76% of all WordPress-related vulnerabilities in 2023, managing over 4,500 vulnerability disclosures in 2024, and operating a Zero-Day Bug Bounty Program that awarded the highest bounty in WordPress history.

Sild also clarified that Patchstack had previously participated in FFtF until the individual pledging hours left the company. Despite this, Patchstack continued to contribute to WordPress security through its managed Vulnerability Disclosure Program and collaborative projects with the European Union. These efforts, according to Sild, represent substantial contributions to the ecosystem, even if they are not reflected in traditional metrics like FFtF.

The rejection has sparked widespread criticism within the WordPress community, with many defending Patchstack’s contributions. Prominent voices in the community expressed frustration and disbelief over the decision, questioning the validity and application of the updated sponsorship criteria. Francesca Marano, Head of Partnership at Patchstack, criticized the lack of transparency in the process and the reliance on FFtF data, which she described as unreliable. Other community members, including Matt Mullenweg, co-founder of WordPress, weighed in, calling the rejection email “crappy” and promising to investigate further.

WordCamp Europe’s organizing team distanced themselves from the decision, clarifying that sponsorship applications are handled by WordCamp Central. However, this has done little to quell frustrations, as critics argue that introducing new requirements without community discussion undermines the open-source ethos of WordPress.

Despite the setback, Patchstack remains committed to supporting the WordPress ecosystem. The company has since pledged contributors to FFtF and is exploring alternative ways to engage with the community during WCEU 2025, including hosting side events or organizing a new developer-focused conference. Sild expressed hope that the controversy would lead to more inclusive and transparent sponsorship processes in the future.

This incident has reignited broader discussions about how contributions to WordPress are measured and valued. Many community members argue that non-traditional contributions, such as Patchstack’s extensive security work, should carry equal weight as FFtF participation. The debate highlights the need for clearer and more equitable criteria for recognizing contributions within the WordPress ecosystem.

As the WordPress community continues to navigate these challenges, the rejection of Patchstack underscores the importance of transparency, inclusivity, and recognition of all forms of contributions. The controversy serves as a reminder of the need to value the diverse efforts that sustain and secure the WordPress platform.