349
submitted 3 months ago by neme@lemm.ee to c/technology@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] catloaf@lemm.ee 17 points 3 months ago

Hacky.

Wordpress has a reputation for the most moronic security issues. Especially when it's built on PHP, which has its own reputation for moronic security issues. And that's saying nothing about the quality of plugin developers or plugin code.

I've worked on Wordpress sites, plugins, and themes. That was many years ago now, but I doubt it's changed that much. If anything, it's mostly benefited from improvements to PHP.

[-] fake@sh.itjust.works 15 points 3 months ago

Has to rank as one of the most exploited pieces of software ever.

Definitely be not aided by the fact it's targeting an audience without the skills or knowledge to adequately configure, maintain and monitor it. And the plugin community only makes the vulnerability exposure worse.

[-] sugar_in_your_tea@sh.itjust.works 4 points 3 months ago

Yup. I imagine a lot of users install a lot of plugins they don't actually need, which just expands the attack surface.

[-] webhead@lemmy.world 2 points 3 months ago

Kind of the old Windows vs Mac problem though. It gets so many exploits because it is so ridiculously popular. No one is going to bother looking for exploits in shit that no one uses right? I'm sure they've got problems like any project but I'm not convinced they're THAT bad. Not to mention a lot of exploits you see are plugins doing dumb shit, not WP itself.

this post was submitted on 28 Aug 2024
349 points (98.3% liked)

Technology

60016 readers
3504 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS