@wordshaper@weatherishappening.network
Post #3901349
2026-07-18 03:11 UTC
RE: https://infosec.exchange/@corq/116938767979195456
Well, this explains the “we just updated your Wordpress install!” email I got from my hosting provider.
I really, really would love to get rid of goddamn Wordpress and use something a bit less… full-featured.
Replies (1)
-
@xabean@infosec.exchange 2026-07-18 03:16
@wordshaper@weatherishappening.network this one time, I helped install wordpress on a VPS for the hacker/makerspace I was a cofounder of, and locked it the !@#$ down. Disallowed people from just uploading plugins. Only allowed images to be served from the uploads directory. Then I got usurped as "tech director" and out of stress I resigned and quit the space entirely. Years later, I get an email "Hey, Cisco is blocking the website, can you unblock it?" and I looked into it. The wordpress install I built was blown away, replaced, and got compromised, and was still compromised. It felt so satisfying to say "No."