When we last covered Matt Mullenweg’s claims about the WordPress trademark, we focused on his claim in an interview that the licenses the WordPress Foundation has with Automattic and him are revocable. That runs counter the publicly available license for Automattic, which says that it is “perpetual, irrevocable.” We also noted that the WordPress Foundation hasn’t published any the licenses it has with anyone on their website. The Automattic license is available through the United States Patent and Trademark Office’s website.

That makes a response he provided on the Hacker News after WP Engine filed a lawsuit highlighted his misleading claims about the trademark situation stand out:

The trademark originally belonged 100% to Automattic. It transferred it to the Foundation, and retained the commercial license and the ability to commercially sub-license. The Foundation gave me a license to run WordPress.org. This has all been public, though I agree it’s complicated and not widely understood.

The license he apparently has isn’t public. He wasn’t the one that made the Automattic license public. He also isn’t being honest about how he previously spoke about the license Automattic has.

Yesterday, his own company put out a post suggesting that he didn’t receive a license for the trademark, but a non-profit different that the WordPress Foundation received one.

Considering that Matt Mullenweg personally has control to harm the security of WordPress websites, the lack of truthfulness on his part is a big security issue.