3 ms·
not even have a very competent team can put enough lipstick on this pig: http://www.cvedetails.com/vulnerability-list/vendor_id-2337/year-2017/opec-1/Wordpress
by pawadu 10y ago
not even have a very competent team can put enough lipstick on this pig:
http://www.cvedetails.com/vulnerability-list/vendor_id-2337/year-2017/opec-1/Wordpress.html http://www.cvedetails.com/vulnerability-list/vendor_id-2337/...
- josefresco 10y agoWhat you're missing is that these security exploits are discovered, patched and disclosed. The same can't be said about most tech services / products. Security through obscurity is not a viable strategy.
- mtberatwork 10y agoPerhaps, but WP also has a large user base from which to pull from so I would hope vulnerabilities get discovered and patched quickly. However, I think it's quite telling that such a popular project still has issues with SQL injection even with so much active development apparently going on.
- pawadu 10y agoWhat has this to do with security through obscurity?? WP security is like Whac-A-Mole, you patch one serious issue and two more pop up. It has been like this for years which shows that the developers don't have the correct mindset to write internet facing code. I pointed you to a SQL injection / remote execution vulnerability in the WP core, in 2017 for gods sake.