Neil BatchelorInteresting read.... Two percent of WordPress plugins are responsible for 99% of the vulnerabilities.
"The 2022 WordPress Vulnerability Annual Report"
https://ithemes.com/blog/the-2022-wordpress-vulnerability-annual-report/
Ipstenu (Mika E.) 🏳️🌈@nbwpuk Sounds about right, honestly.
@ipstenu yeah, true. Unfortunately it's that 2% that give the whole ecosystem a bad rap.
@nbwpuk It's complicated.
The 2% aren't necessarily all that bad in the first place -- as the article notes, you gotta upgrade!
But the real heart is ... reasonable reporting.
Instead of finding a bug, privately disclosing, and letting people fix ... they just attack. And worse is when 'reputable security firms' turn around an report "THIS IS A HACK!" before also talking to the plugin person about it.
iThemes is a good one, in my experience.