@Kintaro Yes - but that doesn't mean WP itself anywhere near "secure".
Going by statistics, yes.
Sure, problems are everywhere, but WP is by far the worst on this list.
....to repeat what I initially said:
If other programs have bugs (that do or do not get abused) doesn't excuse anything of Wordpress.
Anyone who just insists on WP, use it. But then don't cry if you get hacked, sued by angry customers, sued by people receiving malware from your domain, imprisoned because of greedy film companies, shot by idiotic government staff that misread the text on your site, or whatever. WP was convenient, so what? lol
(yes, all these things happen, including the last one)
...except the risk is much higher. But whatever, I don't need to convince anyone to stop using WP.
eg. amount of compromised WP installs (both total number, and percentage of WP installs (or course that are estimations, based on crawler data and so on, but still)), or number of known security bugs per 1000 sloc, or...
...
As I said repeatedly, I'm not trying to evangelize here, I'm just warning. I did that, done, period.
In case anyone has more arguments like "bugs are everywhere" and so on, I know that already.
If someone doesn't want to believe me, it's ok.
And you can't convince me that WP is secure, so no need to try. As said already, statistics, and I even found bugs myself (sql injections = beginner level problem, and it was found less than an hour after looking at a WP download the first time).
it is reasonable that there would be a higher number of WordPress sites compromised because there is a lot more WordPress sites out there.
Sure - and while that has to be a factor, a) there's no way to prove a high/low amount of influence, and b) it doesn't really matter for the real-world risk of a random person choosing a software. As long as the majority values convencience over security and privacyOne could very well argue
Suggesting Drupal for a non-techie is not going to go well.
This question at hand is for sites that are good for non-techies.
I'd suggest Wordpress and someone to maintain it.
https://www.todo10.com/en/wordpress-monthly-maintenance/
Although $1200 a year seems like a lot.
I thought todo10 had a better prices. Weird.
The culprit isn't always WordPress directly itself. From my own experience, it has a lot more to do with the WordPress plugins and themes.
Ya. I try to say that but all the themes depend on them and it's hard to convince him to go with something more drab even if it is safer.
We use essential cookies to make this site work, and optional cookies to enhance your experience.