4 ms·
Just from digging through the WordPress source, and knowing it's a frequent source of CVEs, I think it urgently needs large-scale refactoring and rewriting. If
by jolux 4y ago
Just from digging through the WordPress source, and knowing it's a frequent source of CVEs, I think it urgently needs large-scale refactoring and rewriting. If that can't be done because of how many things depend on it, is the backwards compatibility really worth the continuous stream of security problems? From one perspective it seems kind of wrong to be encouraging people to keep using a platform that is so broken at its core. When asked professionally I tell people to use WordPress.com or another reputable managed host or just avoid the product entirely.
- rograndom 4y agoTo be honest, the majority of the CVEs are for 3rd party plugin and themes that no rewriting of core will fix.
- jolux 4y agoThey couldn’t be fixed by making the plug-in model more structured and restrictive?
- mgkimsal 4y agoYou could, and I think it would help. It would also shift the type of themes/plugins we see, because the discipline in making compatible themes/plugins would weed out certain types of producers.