5 ms·

Same. Supposedly this was the first reporting: https://news.drweb.com/show/?i=14646&lng=en&c=23 https://news.drweb.com/show/?i=14646&lng=en&c=23

jmbwell 4y ago
> It exploits 30 vulnerabilities in a number of plugins and themes for this platform. If sites use outdated versions of such add-ons, lacking crucial fixes, the targeted webpages are injected with malicious JavaScripts. As a result, when users click on any area of an attacked page, they are redirected to other sites. > (Long-ish list of relatively big-name plugins) /me reconsiders trying to relaunch a blog at all
- voytec 4y ago
  Do you need a cow the WordPress is, for a blog? Static Site Generators like Hugo or Jekyll work great.
  - mschuster91 4y ago
    For tech-oriented people, yes, static site generators can be quite great. For non-tech people? There's the reason why Wordpress is so popular: you can either use any of the tons of "hosted Wordpress" providers or throw it up on some cheap ass LAMP virtual server, hell even most providers' FTP space is usually enough. There are tons of themes, tons of plugins with integration to pretty much everywhere, and tons of anything from freelancers to huge media agencies to help you out. Like it or not, Wordpress is the equivalent of English. Almost everyone relevant sans the French speaks it.
  - jmbwell 4y ago
    No. And you're right!
  - HighPlainsDrftr 4y ago
    I've been a fan of the 'simply static' plugin for wordpress for a few years now. Basically, install wordpress on a server, make it accessible only to authorized users (vpn, acl, htauth, whatever works best for you), then have it deploy to an apache server or s3 bucket. The WP designer feels at home. Has a simple deploy button. The pages load significantly faster. Works well most of the time. Sometimes forms can be a bit tricky, but the sites I've deployed it with usually don't have many of them.
    - voytec 4y ago
      I know that it seems like a great place to plug your favorite plugin but my point is: Why run WordPress to serve static site when you have SSGs?
denton-scratch 4y ago
Thanks - that one works. I don't know why the title link gives a white page. I won't drop my pants in order to read an article.

jmbwell 4y ago

> It exploits 30 vulnerabilities in a number of plugins and themes for this platform. If sites use outdated versions of such add-ons, lacking crucial fixes, the targeted webpages are injected with malicious JavaScripts. As a result, when users click on any area of an attacked page, they are redirected to other sites. > (Long-ish list of relatively big-name plugins) /me reconsiders trying to relaunch a blog at all

voytec 4y ago
Do you need a cow the WordPress is, for a blog? Static Site Generators like Hugo or Jekyll work great.
- mschuster91 4y ago
  For tech-oriented people, yes, static site generators can be quite great. For non-tech people? There's the reason why Wordpress is so popular: you can either use any of the tons of "hosted Wordpress" providers or throw it up on some cheap ass LAMP virtual server, hell even most providers' FTP space is usually enough. There are tons of themes, tons of plugins with integration to pretty much everywhere, and tons of anything from freelancers to huge media agencies to help you out. Like it or not, Wordpress is the equivalent of English. Almost everyone relevant sans the French speaks it.
- jmbwell 4y ago
  No. And you're right!
- HighPlainsDrftr 4y ago
  I've been a fan of the 'simply static' plugin for wordpress for a few years now. Basically, install wordpress on a server, make it accessible only to authorized users (vpn, acl, htauth, whatever works best for you), then have it deploy to an apache server or s3 bucket. The WP designer feels at home. Has a simple deploy button. The pages load significantly faster. Works well most of the time. Sometimes forms can be a bit tricky, but the sites I've deployed it with usually don't have many of them.
  - voytec 4y ago
    I know that it seems like a great place to plug your favorite plugin but my point is: Why run WordPress to serve static site when you have SSGs?

denton-scratch 4y ago

Thanks - that one works. I don't know why the title link gives a white page. I won't drop my pants in order to read an article.