Roger Marquez
Elite Member
- Apr 17, 2017
- 5,126
- 7,822
WordPress Is Still The KING!
- Thread starter Roger Marquez
- Start date
shuttershades
Senior Member
- Oct 26, 2013
- 909
- 515
Is the most hackble
xReminisce
Elite Member
- Dec 29, 2012
- 7,333
- 36,787
as well as being super friendly and too many customizable options 
I'm surprised blogger is still alive
I'm surprised blogger is still alive
very interesting. i wonder how many of the 44% are woocomerce plug in.
BIG FACTS!
leechesBleechin
Supreme Member
- Feb 16, 2017
- 1,218
- 3,224
It would be the same for anything with the biggest market slice. You don't get that achievement with low amounts of features, and the more features you have the more exploits exist. And of course, the more popular you are, the more people try and exploit you. An unfixable problem most likely
BrandingCat
Elite Member
- Jan 6, 2015
- 8,115
- 10,311
Because it's easy, not because it's good, but I am stupid and happy with it.
Mactronn
Power Member
- Feb 17, 2009
- 594
- 320
Because it's most widely used. Right?
Xdfffninja
Senior Member
- Jan 13, 2019
- 932
- 1,542
Has anyone ever doubted that WP is king?
Almost.
Don't also that most attacks succeed because people are too lazy to update theirs tools. Of course, 0days exist & could be use but if you are careful, you back up regularly your code, content and install snapshots on your server, you are safe in 95% of the cases.
suicidal_thought
Banned - Multiple Rules Violations
- Sep 25, 2020
- 52
- 14
but the most succesful companies usually dont do everything of that type, they have personal scripts
CyHead
Supreme Member
- Apr 6, 2009
- 1,228
- 1,083
It's modular, it scales and there's tons of plugins.
It's not more hackable - it's just that people don't lockdown their sites properly or run plugins that are nulled or poorly coded, so it serves as an attack vector.
That goes for many CMS, but Wordpress is so popular that it's more profitable to focus on finding ways to hack it. Just note 99% of the hacks are targeting plugins, and not the base CMS.
The people who poop on Wordpress usually code in another language and are unhappy at how popular it is.
It's not more hackable - it's just that people don't lockdown their sites properly or run plugins that are nulled or poorly coded, so it serves as an attack vector.
That goes for many CMS, but Wordpress is so popular that it's more profitable to focus on finding ways to hack it. Just note 99% of the hacks are targeting plugins, and not the base CMS.
The people who poop on Wordpress usually code in another language and are unhappy at how popular it is.
virtualprotect
Junior Member
- Dec 21, 2013
- 105
- 38
It should be obvious, there is much more customizations using word press and more freedom especially if you want to make a very intuitive system.
That's not true. If you keep the core, plugins and your theme up-to-date and they are not cracked, you should be completely fine.
It's also because most of vuln are easy to exploit with some tools - Metasploit or WPScan - and this tools are built in by default in Kali (formely BackTrack).
Even if you are not a cador, you can use WPScan. To summarize, you don't have to understand how infosec runs or how WordPress runs to use WPScan. Just check on YouTube "WPScan+Kali" to see how simple is.
Even if you are not a cador, you can use WPScan. To summarize, you don't have to understand how infosec runs or how WordPress runs to use WPScan. Just check on YouTube "WPScan+Kali" to see how simple is.
shuttershades
Senior Member
- Oct 26, 2013
- 909
- 515
There are some exploits on wordpress that are not even public even if you have all your plugins/themes updated.
For the *latest* core version of WordPress? Even if that's true, how do you reckon it happening with WordFence and ModSecurity + CSF on the server-level? Please hit me up and I'll gladly let you try if you have such an exploit