I think the DPO of Wordpress.org needs to re-evaluate their knowledge & understanding of the UK GDPR and their response to you.

You could of course refer the matter to the UK ICO but too oft that is akin to using a chocolate teapot