6 ms·

Well, back in the day this lead to thousands upon thousands of vulnerable WordPress sites

• mickeyp 1y ago
  False equivalence. That the creators of various PHP blogging platforms sucked at security does not invalidate the poster's point that a self-hosted CMS with a simple comment system is indeed much simpler and easier to reason about.
  • rokkamokka 1y ago
    I suppose it's rather the "without maintenance" part. Had everyone updated their WordPress sites the problem would've been much less.
    • InMice 1y ago
      The wordpress core can be kept up to date but the vulnerabilities from plugins, relying on fixes and updating plugins i think was more the problem than the core. In the 2010s if you left a wordpress blog unattended even with the official default filter plugin it would fill with spam comments. I dont know if thats still a problem.
      • robinsonb5 1y ago
        My own blog - which gets maybe a couple of posts a year these days, and almost no audience - had 59 spam comments so far today. It really is time I turned off comments.
        • InMice 1y ago
          Same here with any blog ive ever hosted