4 ms·

Let's ask one question: what CMS, CRM, programming language, operating system, etc doesn't come out with major security flaws every once in a while? All of the

Let's ask one question: what CMS, CRM, programming language, operating system, etc doesn't come out with major security flaws every once in a while? All of them, even OpenBSD. Software has bugs, and security flaws. It is not how buggy they are, but how well we patch them from a larger scale and that, WordPress does extremely well.

krapp 11y ago
One of the biggest strengths of Wordpress is also a fatal flaw - the flexibility of its plugin system, and how easy it makes finding and installing plugins and themes. Each is its own self-contained web application that runs with the same permissions as the application itself. Yes, this applies to any open source application, but given how huge Wordpress' plugin landscape is, it's a big problem even if you assume the core application itself is secure (for the sake of argument.) Almost nobody pores over every line of code in every plugin before they install it (much less each update) - at best they just check to see if it has a high rating.