News for hackers. Stuff that matters.

A comment on I've used WordPress for 20 years, and I've stopped recommending it. Parent comment

Re:I've used WordPress for 20 years, and I've stopped recomm... by zenincognito on Wednesday October 28, 2026 @05:12AM (#50270905)
The number one hit on most wordpress install and all other static site logs I have had has been /wp-admin and /wp-admin/install.php .. Infact, right not one of the hatamoto instances is reporting top hit as /wp-admin/install.php
[ Parent | on HN ]
Re:I've used WordPress for 20 years, and I've stopped recomm... by prepend on Wednesday October 28, 2026 @08:14AM (#50272376)
Right, me too. I assume everyone running PHP had tons of hits to that. Been that way for like 20 years, but that doesn’t mean probers get past that.
[ Parent | on HN ]
Re:I've used WordPress for 20 years, and I've stopped recomm... by nbajka on Wednesday October 28, 2026 @05:36AM (#50271038)
I once copied the wordpress files onto a new domain and a few minutes later a bot had already accessed /wp-admin/install.php and it helpfully installed the site for me using a database of their own to get RCE.
[ Parent | on HN ]