Hacker News Reader

> WordPress is okay if you have a site that you don't really care about and isn't worth hacking

Unfortunately all sites are worth hacking to host phish kits (fake login pages for phishing), and hosting one will get your website added to browser warn lists and flagged by search engines. There seem to be automated bots scanning for vulnerable WordPress sites so it's possible to become a target without much attention from the attacker.

View on HN

This is true, but I would hope that readers here know enough to at least keep WordPress up-to-date. Most attacks target old exploits. There are millions of small WordPress sites that may never get hacked if they stay updated. If you become big enough, however, you become a much more likely target for zero-days. In that case, you probably don't want to be running WordPress any more than you want to be running Windows.

Reply on news.ycombinator.com