answers, "why you should write your own framework, if you have the knowledge and time."
Definitely not. Wordpress plugins are the source of exploits in the Wordpress ecosystem -- it's very very rarely the Wordpress core itself.
WordPress sites under attack from newly found Linux trojan
11–20 of 83 posts
Re: WordPress sites under attack from newly found Linux trojan
#12Website loads as a white page to me. Even the Google-cached version.
Same. Supposedly this was the first reporting: https://news.drweb.com/show/?i=14646&lng=en&c=23
> It exploits 30 vulnerabilities in a number of plugins and themes for this platform. If sites use outdated versions of such add-ons, lacking crucial fixes, the targeted webpages are injected with malicious JavaScripts. As a result, when users click on any area of an attacked page, they are redirected to other sites.
> (Long-ish list of relatively big-name plugins)
/me reconsiders trying to relaunch a blog at all
Re: WordPress sites under attack from newly found Linux trojan
#13answers, "why you should write your own framework, if you have the knowledge and time."
[deleted]
Re: WordPress sites under attack from newly found Linux trojan
#14answers, "why you should write your own framework, if you have the knowledge and time."
Definitely not. Wordpress plugins are the source of exploits in the Wordpress ecosystem -- it's very very rarely the Wordpress core itself.
And it's almost always older versions of plugins that are vulnerable; however, at some point a plugin update will break the website and then you don't upgrade because there's more important things to do ...
Re: WordPress sites under attack from newly found Linux trojan
#15Earlier quoted context omitted.
Same. Supposedly this was the first reporting: https://news.drweb.com/show/?i=14646&lng=en&c=23
> It exploits 30 vulnerabilities in a number of plugins and themes for this platform. If sites use outdated versions of such add-ons, lacking crucial fixes, the targeted webpages are injected with malicious JavaScripts. As a result, when users click on any area of an attacked page, they are redirected to other sites. > (Long-ish list of relatively big-name plugins) /me reconsiders trying to relaunch a blog at all
Do you need a cow the WordPress is, for a blog? Static Site Generators like Hugo or Jekyll work great.
Re: WordPress sites under attack from newly found Linux trojan
#16Website loads as a white page to me. Even the Google-cached version.
Same. Supposedly this was the first reporting: https://news.drweb.com/show/?i=14646&lng=en&c=23
Thanks - that one works. I don't know why the title link gives a white page. I won't drop my pants in order to read an article.
Re: WordPress sites under attack from newly found Linux trojan
#17Earlier quoted context omitted.
Definitely not. Wordpress plugins are the source of exploits in the Wordpress ecosystem -- it's very very rarely the Wordpress core itself.
And it's almost always older versions of plugins that are vulnerable; however, at some point a plugin update will break the website and then you don't upgrade because there's more important things to do ...
It's the dependency loop of Wordpress really - people can't update the core because their plugins don't work with new core (yet, sometimes never), so their (outdated) core remains an exploit.
Re: WordPress sites under attack from newly found Linux trojan
#18Earlier quoted context omitted.
> It exploits 30 vulnerabilities in a number of plugins and themes for this platform. If sites use outdated versions of such add-ons, lacking crucial fixes, the targeted webpages are injected with malicious JavaScripts. As a result, when users click on any area of an attacked page, they are redirected to other sites. > (Long-ish list of relatively big-name plugins) /me reconsiders trying to relaunch a blog at all
Do you need a cow the WordPress is, for a blog? Static Site Generators like Hugo or Jekyll work great.
For tech-oriented people, yes, static site generators can be quite great.
For non-tech people? There's the reason why Wordpress is so popular: you can either use any of the tons of "hosted Wordpress" providers or throw it up on some cheap ass LAMP virtual server, hell even most providers' FTP space is usually enough. There are tons of themes, tons of plugins with integration to pretty much everywhere, and tons of anything from freelancers to huge media agencies to help you out.
Like it or not, Wordpress is the equivalent of English. Almost everyone relevant sans the French speaks it.
Re: WordPress sites under attack from newly found Linux trojan
#19Earlier quoted context omitted.
> It exploits 30 vulnerabilities in a number of plugins and themes for this platform. If sites use outdated versions of such add-ons, lacking crucial fixes, the targeted webpages are injected with malicious JavaScripts. As a result, when users click on any area of an attacked page, they are redirected to other sites. > (Long-ish list of relatively big-name plugins) /me reconsiders trying to relaunch a blog at all
Do you need a cow the WordPress is, for a blog? Static Site Generators like Hugo or Jekyll work great.
No. And you're right!
Re: WordPress sites under attack from newly found Linux trojan
#20Wordpress is great for rapid prototyping but as history has shown, relying on third parties for additional functionalities in production environments, comes with great risks.
Most usage of Wordpress today are definably not blogs, but full blown websites with many functionalities not found on a blogging software.