Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack

Otter@lemmy.ca to Technology@lemmy.world – 307 points –
Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack
arstechnica.com
51

You are viewing a single comment

It's really a shame because by now WordPress itself actually works quite well. Sure, it's fueled by unspeakably ugly spaghetti code. But at least it's unspeakably ugly spaghetti code that works and receives regular automatic updates.

And other than putting up a verification program I don't see what they could do to improve the plugin situation.

I agree. I don't hate wordpress. It seems a bit dated by today's standards and bloated in some aspects but you can definitely make a solid, fast website with it. It's getting a bad reputation for its toxic plugin dev scene and crappy sites built using Elementor.

Elementor shudders

What an absolute nightmare that was

As someone who found elementor the only thing that was working at the time - any suggestions to do better? I have no coding experience fyi

Coding is pretty much the only way to make a site that is both flexible and fast. If you wanna stay with page builders, I'd recommend something like webflow or framer but going with these closed systems is really not that amazing longterm. You're gonna sink a lot of money into a system that will almost certainly enshittify in the future.

If you're willing to pick up coding, try to make your own theme with something like Advanced Custom Fields in wordpress or switch to something like Kirby CMS which is more flexible out of the box than wordpress and has great docs.