News for hackers. Stuff that matters.

A comment on WordPress Turns 20. Parent comment

Re:WordPress Turns 20 by rectang on Monday May 29, 2023 @12:35AM (#36110679)
When you include plugins and themes — which is a must because that is how WordPress gets used — the ecosystem as a whole is a security shitshow. Many popular plug-in vendors have abysmal security records. You don’t need to find a vuln in core WordPress to pwn installs.
[ Parent | on HN ]
Re:WordPress Turns 20 by bredren on Monday May 29, 2023 @12:43AM (#36110732)
If you haven’t actually tried to do something professional with Wordpress, you might think this description is over the top. But it actually undersells how bad it really is.
[ Parent | on HN ]
Re:WordPress Turns 20 by onlypositive on Monday May 29, 2023 @02:33AM (#36111321)
To all the haters in this thread: Pull requests welcome. Til then, stop spreading fud. WP security is fine.
[ Parent | on HN ]
Re:WordPress Turns 20 by rob on Monday May 29, 2023 @10:45AM (#36114497)
No, you’re wrong! We’re going to implement our own custom CMS in Rust using WASM and deploy it to 5000 edge servers for our local brochure business website that needs a little bit of functionality and has a small budget with no technical experience.
[ Parent | on HN ]