3 ms·
You can't really trust the opinion of someone who leads with: "I use WordPress and it’s insanely secure". It's not. It has serious security bugs in it which a
by JohnTHaller 15y ago
You can't really trust the opinion of someone who leads with: "I use WordPress and it’s insanely secure". It's not. It has serious security bugs in it which allow full web server access on a fairly regular basis. You need to keep it up to date and subscribe to the announcement list to ensure you don't miss an update, just like you do with any content management system.
- joshbetz 15y agoAll updates are one-click and it tells you when updates are available. I don't see a problem with expecting people to keep their software up-to-date. I don't know of any software that is secure forever without ever worrying about updates.
- JohnTHaller 15y agoOne-click updates are great, if you happen to be logged into your site that day. You need to subscribe to the announce list and get the info sooner for days when you are not. Same as with any CMS. And I never said there was a problem with expecting people to keep their software up to date. Just that it doesn't happen automatically. People have to do it. And I know a lot of people with outdated Wordpress installs. That's the reason behind the recent news of 60,000 Wordpress sites being hacked. Wordpress is pretty secure if you keep it up to date and monitor when updates happen. But saying it is 'insanely secure' is simple ludicrous.