Re:Ask HN: Why has nobody built a better Wordpress?
by dr_hercules on Thursday July 02, 2015 @04:34AM
(#9817540)
> Maybe my experience is not to be generalised to WordPress in general, but it put me off.
WordPress plug ins are - as far as I know - not reviewed. You're at the mercy of the respective developer.
Re:Ask HN: Why has nobody built a better Wordpress?
by liviu- on Thursday July 02, 2015 @05:02AM
(#9817629)
They are, as this link seem to indicate: https://wordpress.org/plugins/add/
>Currently there are 224 plugins in the review queue, 198 of which are awaiting their initial review.
Re:Ask HN: Why has nobody built a better Wordpress?
by dr_hercules on Thursday July 02, 2015 @05:19AM
(#9817699)
There are more than 38k plug ins available (https://en.wordpress.org/plugins/). And also from what I have seen so far - there is no extensive (if any) reviewing done regarding safety and quality.
Re:Ask HN: Why has nobody built a better Wordpress?
by lucaspiller on Tuesday July 07, 2015 @03:48AM
(#9844092)
When you first add a new plugin it is reviewed, but once it's been accepted you are free to push out whatever changes you want without review.
I tried to use WordPress once. I downloaded a theme from wordpress.org with the assumption that themes are reviewed before making there. Nevertheless, I did some basic pentesting before putting my app live, and I quickly found a XSS vulnerability in the search bar of the theme (their paid version featured the same vulnerability). Maybe my experience is not to be generalised to WordPress in general, but it put me off.