3 ms·
Wordpress has had a history of serious security vulnerabilities that gave it a bad rap for folks that have been following the industry for a long time. I think
by efficax 6y ago
Wordpress has had a history of serious security vulnerabilities that gave it a bad rap for folks that have been following the industry for a long time. I think automattic has done a great job overall in improving Wordpress and you don't hear about mass defacements or easy hacks for the standard wordpress install anymore.
The plugin ecosystem however opens you up once again: here the devil is in the details. Every plugin you install might be the giant blinking red light that says: hack me, steal my data, etc.
On balance though wordpress is pretty good these days.
- trey-jones 6y agoPart of the reason for highly visible security vulnerabilities in Wordpress is just a result of the massive user base. Heavily used platforms are naturally more heavily targeted by malicious users since they are easier to find, and exploits are more readily available. In truth, most software at any given time probably has serious security vulnerabilities that just aren't as obviously exploitable, and I wouldn't say that the volume of published exploits related to Wordpress is indicative of a poorly managed or written piece of software.