Is WordPress Secure?

Wilson Grant Fisk · Oct 20, 2018

WordPress is one of the most high-profile open source CMS's in use today. Being that 60% of all CMS websites use Wordpress, and 31% of all websites on the Internet use it, it's safe to say that it's a frequent target of security exploits.

The subject of whether WordPress is secure or not has been at the core of infosec discussions for several years. With hundreds of thousands of WordPress websites getting hacked annually, the question remains: "Is WordPress really secure?”

Good Read: https://securitytrails.com/blog/is-wordpress-secure?from=relatedposts

davids355 · Oct 20, 2018

I guess the answer is no. But that answer probably remains the same with any and every other cms platform.

Why? Because everything can be reverse engineers and because hackers are just as smart, if not smarter, than web developers- and probably have a greater motivation as well.

But the good thing about Wordpress is that it’s very well supported which probably makes it safer and more secure than most other alternatives.

Deleted member 813988 · Oct 20, 2018

Depends on what you do to secure it

blogzandstuff · Oct 20, 2018

se900se said:
Depends on what you do to secure it

Yes exactly right, I see so many people use admin to login lol!
I hide login page, theme , stop right click inspect etc. I also use three login stages, including secret question and answer. Get one part of the stage wrong and you're locked out

Veil123 · Oct 20, 2018

blogzandstuff said:
Yes exactly right, I see so many people use admin to login lol!
I hide login page, theme , stop right click inspect etc. I also use three login stages, including secret question and answer. Get one part of the stage wrong and you're locked out

Well, It is not about the login, but the plugin exploits from the creators. That is the one and only place where the exploits can "show up" every now and then.
Nowadays, only the newbies go through the login as those websites that you can get from there will be most likely not worth a penny.

p3n7357 · Oct 20, 2018

nothing is secure on internet even wordpress

blogzandstuff · Oct 20, 2018

Veil123 said:
Well, It is not about the login, but the plugin exploits from the creators. That is the one and only place where the exploits can "show up" every now and then.
Nowadays, only the newbies go through the login as those websites that you can get from there will be most likely not worth a penny.

that's why you should only use trust paid for plugins and themes, keep them updated. Best make it difficult. Not just about logins, but common sense. nothing is really secure if they want to get in

Aty · Oct 21, 2018

Secure or not, people use it because of its simplicity.

Deleted member 923340 · Oct 21, 2018

Drupal is the most security feature rich cms there is.
A ton of enterprises uses Drupal for this reason.
https://www.drupal.com/showcases

Even Redhat uses Drupal.

SEOmammoth · Oct 21, 2018

It's as secure as it gets. With all the features, it's better than all its competitors.

Good read tho

Deleted member 813988 · Oct 21, 2018

blogzandstuff said:
Yes exactly right, I see so many people use admin to login lol!
I hide login page, theme , stop right click inspect etc. I also use three login stages, including secret question and answer. Get one part of the stage wrong and you're locked out

I also use Sucuri!

whiteblackseo · Oct 21, 2018

There's a reason why security companies like Wordfence and Sucurii are thriving, the need for security in WP sites are detrimental right now.

Jake Gib · Oct 21, 2018

I think it is pretty secure but there are certain things you can do to even secure it more.

HelloBTCMINER · Oct 21, 2018

Deleted member 923340 said:
Drupal is the most security feature rich cms there is.
A ton of enterprises uses Drupal for this reason.
https://www.drupal.com/showcases

Even Redhat uses Drupal.

Even White House too!

bmfuxia · Oct 21, 2018

Honestly any site that provides a website build where you can just drag and drop things isn't secure, The only secured site is if you code it yourself from scratch, a good old html coding should do the job.

Mr Dingle · Oct 21, 2018

A common feature of WP is the need to improve all the basic features.
The security is like locking the door and leaving the key under a brick
I know from experience that sorting a hacked WP website doesn't have a funny side
Now I use html with a live ftp connection from my desktop. Posting is quick and easy, also I could replace the entire website in minutes if I got hacked

bmfuxia · Oct 21, 2018

Mr Dingle said:
A common feature of WP is the need to improve all the basic features.
The security is like locking the door and leaving the key under a brick
I know from experience that sorting a hacked WP website doesn't have a funny side
Now I use html with a live ftp connection from my desktop. Posting is quick and easy, also I could replace the entire website in minutes if I got hacked

pretty much the good thing about html if you get hacked its easy to replace or get things back, meanwhile things like WP you get hacked everything will be gone.

DanDD · Oct 21, 2018

better than other cms's and better than reinventing the wheel

crissdinesh · Oct 21, 2018

WordPress is not completely secured. Many WP sites are vulnerable.

Mr Dingle · Oct 21, 2018

bmfuxia said:
pretty much the good thing about html if you get hacked its easy to replace or get things back, meanwhile things like WP you get hacked everything will be gone.

True, and with AMP html you get a lot of ready made components with the javascript aspect taken care of. I've been giving it a go and absolutely love it

Is WordPress Secure?

Elite Member

Super Moderator

Deleted member 813988

Guest

Elite Member

Elite Member

Power Member

Elite Member

Elite Member

Deleted member 923340

Guest

Junior Member

Deleted member 813988

Guest

Elite Member

Registered Member

BANNED

BANNED

Regular Member

BANNED

Senior Member

Regular Member

Regular Member

Main Menu

Marketplace

Making Money

BlackHat World