Why the Bad Reputation?
It’s not even fair to say that WordPress has a bad reputation for security flaws. However, there have been a few notable times where either WordPress developers dropped the ball or they got blamed for it. In the summer of 2009 WordPress suffered a series of attacks around some vulnerabilities. WordPress developers realized that they were no longer playing softball, and if they were going to build something to be used by millions they had to close up the holes. They did just that, and by the end of the summer of ’09, WordPress core security was airtight.
In late 2011 millions of websites were suddenly, with little warning, under attack. The vulnerability was a flaw in a PHP script called TimThumb. This script was used ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access