7.0.2 got released on Friday. Exploits are already happening. People reporting hacks
You must log in or register to comment.
1 monthFriendly reminder to anyone who cares enough that you can still use WordPress to make your site with all your fancy plugins and layouts, and then export that to a static site for hosting. No need to actually host Wordpress itself that way you avoid nearly all of this BS.
Simply Static is currently the most actively maintained solution, as a plugin for wp:
https://docs.simplystatic.com/category/6-user-guidesThere is also WP2Static, which is a very long standing project: https://github.com/elementor/wp2static
this thing here. I’ve dramatically reduced support work at two shops I’ve set this up for. incidents went from from coupla times a month to once a year. not to mention - you don’t need no VPS no more, don’t need no database, nothing, the simplest web hosting will do and it’s very cache friendly.
- 9point6@lemmy.worldEnglish1 month
https://www.wordfence.com/threat-intel/vulnerabilities
The CVE list always cracks me up, there’s like tens daily
- SreudianFlip@sh.itjust.worksEnglish1 month
Anyone who hosts websites can check the logs and see the bots hammering away at wp/admin primarily, even if you are not running any WordPress. Low hanging meat? Fresh fruit?
- Marthirial@lemmy.worldEnglish1 month
I have developed and hosted over 760 WP sites since 2006 and have never been hacked. Ever.
Mediocre craftspeople blame their tools.
- kungen@feddit.nuEnglish1 month
I’ve driven a poorly designed car without many safety features for years, and I’ve never flown through the windshield, ever.
Glad you got lucky. But a tool having one critical vulnerability after another has nothing to do with mediocre craftsmanship and blaming admins for getting hacked after updating their software is nothing but disrespectful and condescending
- kohlenstoff@feddit.orgEnglish1 month
What would you recommend as an alternative for the non-technical inclined users who want to have a public website?
- non_burglar@lemmy.worldEnglish1 month
Is this a trick question?
Websites are complicated. Easy, secure, cheap: pick two. There is no such thing as a universally easy, secure and cheap solution, or else we would always be using it.
Assuming you want secure and easy, I would suggest you pay someone who knows what they’re doing.
- kohlenstoff@feddit.orgEnglish1 month
No, not a trick question at all.
I know what I am doing but people I work for do not, therefore my question for an alternative where these people can write text on a simple website in a WYSIWYG editor. Going by your comment you haven’t found one either which makes WP sadly the only option for this specific use case.
- non_burglar@lemmy.worldEnglish1 month
I haven’t found one, no. I just use markdown and a static HTML site generator.
