Critical issue discovered in WordPress Core affecting the majority of WordPress-built sites. The zero-day is a pre-authentication Remote Code Execution (RCE) that can be used by attackers to run malicious code to steal data or seize control without requiring login details...
7.0.2 got released on Friday. Exploits are already happening. People reporting hacks
Friendly reminder to anyone who cares enough that you can still use WordPress to make your site with all your fancy plugins and layouts, and then export that to a static site for hosting. No need to actually host Wordpress itself that way you avoid nearly all of this BS.
this thing here. I’ve dramatically reduced support work at two shops I’ve set this up for. incidents went from from coupla times a month to once a year. not to mention - you don’t need no VPS no more, don’t need no database, nothing, the simplest web hosting will do and it’s very cache friendly.
Friendly reminder to anyone who cares enough that you can still use WordPress to make your site with all your fancy plugins and layouts, and then export that to a static site for hosting. No need to actually host Wordpress itself that way you avoid nearly all of this BS.
this thing here. I’ve dramatically reduced support work at two shops I’ve set this up for. incidents went from from coupla times a month to once a year. not to mention - you don’t need no VPS no more, don’t need no database, nothing, the simplest web hosting will do and it’s very cache friendly.