Years ago (2006-2013) I ran a personal site that used Wordpress for its front page/blog, with the remainder using very simple hand-rolled PHP templating and text files. The front page was a constant source of trouble — if I didn’t stay perfectly on top of keeping Wordpress up to date I’d get hit with the same kind of hidden link stuff mentioned in the article. Crazy thing is that my site barely even had an audience to speak of… can’t imagine what it must be like for more popular blogs.

If I were to spin up a new personal site I think it’d be with something like gohugo.io deployed on Netlify, making it as static as possible with no room for exploits.