5 ms·

Is there a better CMS? WordPress has a huge plugin ecosystem, a huge developer talent pool, and is relatively straightforward to use. It also costs nothing, whi

by chomp 4y ago

Is there a better CMS? WordPress has a huge plugin ecosystem, a huge developer talent pool, and is relatively straightforward to use. It also costs nothing, which is important for overseas developers, and can be extremely cheap to host. It also (can be) very easy to use. Plugins and theme bundles can make this more complex, but it's easy enough to hand a properly secured and deployed WordPress to a marketing or media team and have them do 90% of the work, which is a win for dev and ops teams.

sidewndr46 4y ago
Are the developers really that talented? The only interesting news I see about WordPress is the latest vulnerability being exploited.
- deleted 4y ago
  [deleted]
- jraph 4y ago
  WordPress is huge, it represents a big chunk of the web. I've read from a quarter to a third, or even more. It's a good target. Of course we are going to hear about security vulnerabilities more for WordPress than for any other CMS. There is nothing specific to WordPress about the issue this post relates IIUC apart from the fact it is a privileged target. And there's no news when everything is fine, which is most of the time.
  - Tijdreiziger 4y ago
    Your estimate is low: it's actually 43%. https://w3techs.com/technologies/overview/content_management https://w3techs.com/technologies/overview/content_management
    - chomp 4y ago
      This aligns with the numbers we had when I worked at a large webhosting company.
- kevincox 4y ago
  You can say basically the same about any popular system. Chrome, Windows, iOS all have regular vulnerabilities. Maybe the difference is that they have very strong forced patching, whereas there are enough WordPress installs that don't get critical patches for far too long.
  - sidewndr46 4y ago
    In all measures, Windows is a dumpster fire. Usability, security, stability, etc. So what is your argument here? That Wordpress is at least as bad as a popular OS? I don't know enough about iOS to comment.
    - kevincox 4y ago
      My point is that all popular software is a security nightmare because our industry sucks at security. Anything that is a high value attack target gets pwned. Very little software appears to be actually secure. Maybe OpenSSH is on that short list, but even that has occasional problems. But for it's attack value the known vulnerabilities seem low.
rwmj 4y ago
It was the plugin ecosystem that got my website hacked. A plugin that I'd briefly installed to test, thought I had removed, but was somehow still there on disk.
rglover 4y ago
I no longer use it actively but CraftCMS was good to me for several years: https://craftcms.com/ https://craftcms.com/

by chomp 4y ago

sidewndr46 4y ago

Are the developers really that talented? The only interesting news I see about WordPress is the latest vulnerability being exploited.

deleted 4y ago
[deleted]
jraph 4y ago
WordPress is huge, it represents a big chunk of the web. I've read from a quarter to a third, or even more. It's a good target. Of course we are going to hear about security vulnerabilities more for WordPress than for any other CMS. There is nothing specific to WordPress about the issue this post relates IIUC apart from the fact it is a privileged target. And there's no news when everything is fine, which is most of the time.
- Tijdreiziger 4y ago
  Your estimate is low: it's actually 43%. https://w3techs.com/technologies/overview/content_management https://w3techs.com/technologies/overview/content_management
  - chomp 4y ago
    This aligns with the numbers we had when I worked at a large webhosting company.
kevincox 4y ago
You can say basically the same about any popular system. Chrome, Windows, iOS all have regular vulnerabilities. Maybe the difference is that they have very strong forced patching, whereas there are enough WordPress installs that don't get critical patches for far too long.
- sidewndr46 4y ago
  In all measures, Windows is a dumpster fire. Usability, security, stability, etc. So what is your argument here? That Wordpress is at least as bad as a popular OS? I don't know enough about iOS to comment.
  - kevincox 4y ago
    My point is that all popular software is a security nightmare because our industry sucks at security. Anything that is a high value attack target gets pwned. Very little software appears to be actually secure. Maybe OpenSSH is on that short list, but even that has occasional problems. But for it's attack value the known vulnerabilities seem low.

rwmj 4y ago

It was the plugin ecosystem that got my website hacked. A plugin that I'd briefly installed to test, thought I had removed, but was somehow still there on disk.

rglover 4y ago

I no longer use it actively but CraftCMS was good to me for several years: https://craftcms.com/ https://craftcms.com/