3 ms·

Not much elaboration is needed. WordPress has a surprising number of critical security holes. http://en.wikipedia.org/wiki/WordPress#Vulnerabilities http://en

• nir 17y ago
  This article refers to holes in previous versions. Do you have reference to holes in the current one? If there are, wouldn't Wordpress.com be just as vulnerable?
• ryanwaggoner 17y ago
  Did you even bother to read that? That's almost all from 2-3 years ago. The only recent stuff is the list from Secunia, which for 2009 is all marked as patched: http://secunia.com/advisories/product/6745/?task=advisories_2009 http://secunia.com/advisories/product/6745/?task=advisories_... And that only illustrates the broader point here: WordPress is open source and incredibly widely used, so typically vulnerabilities are found and patched pretty fast. For 99.9% of people, there's not really a better alternative.
  • jeff18 17y ago
    Wow, I can tell this is a touchy subject for you. I'm not claiming that I know of any unknown security flaws, I was simply proving to you that there have historically been quite a few critical security flaws. Are you claiming that the current version of WordPress has somehow transcended its track record of critical vulnerabilities, and surely, this one will be the one for the ages? I don't know of any current zero-day exploits in Windows either... Does that logically mean that Windows is a rock-solid platform? Also, there are no better alternatives to WordPress? A hundred startups and blog platforms would disagree! There certainly are quite a few more secure alternatives. I personally use Bloggart on App Engine. :)