zlacker

Well, back in the day this lead to thousands upon thousands of vulnerable WordPress sites

>>rokkam+(OP)
False equivalence. That the creators of various PHP blogging platforms sucked at security does not invalidate the poster's point that a self-hosted CMS with a simple comment system is indeed much simpler and easier to reason about.

>>mickey+n
I suppose it's rather the "without maintenance" part. Had everyone updated their WordPress sites the problem would've been much less.

>>rokkam+B1
The wordpress core can be kept up to date but the vulnerabilities from plugins, relying on fixes and updating plugins i think was more the problem than the core.

In the 2010s if you left a wordpress blog unattended even with the official default filter plugin it would fill with spam comments. I dont know if thats still a problem.

>>InMice+Y2
My own blog - which gets maybe a couple of posts a year these days, and almost no audience - had 59 spam comments so far today. It really is time I turned off comments.

>>robins+n4
Same here with any blog ive ever hosted