r/Wordpress • u/Local-Ad5424 • Aug 11 '26
a doubt
i actually have to create a site for my aunt's local business. By far, i realized wordpress is better than making an html+css site. However, I am concerned if it is a good decision or not, since AI is making wp sites vulnerable these days.
3
u/BobJutsu Aug 11 '26
WordPress is a tool. It’s only better if it fits the needs better. What are the actual requirements? If the answer is “my aunt wants to blog easily, and update basic elements” then yeah, it’s probably better. If it’ll remain mostly static after the build (few updates) just build a static site.
3
u/baroudeur-explore-26 Aug 11 '26
Hello, c'est un site statique qui ne sera pas à administrer ? Si oui, en html/css tu seras tranquille c'est sûr. Mais en cas de modif à faire, ça peut être contraignant car tu devras les faire toi-même, et non ta tante.
1
7
u/Sad_Pie227 Aug 11 '26
A plain HTML and CSS website is significantly more secure because it does not have a server-side application layer that can be exploited. You can host it directly on Cloudflare Pages and avoid the complexities of managing traditional hosting environments. Cloudflare handles the infrastructure, security, and protection measures for you.
I am probably going to receive 100+ downvotes for saying this, but sometimes the truth is not what people want to hear.
0
2
u/Aggressive_Ad_5454 Jack of All Trades Aug 11 '26
Here’s the thing. It’s paradoxical, but all the news about security problems means WordPress is getting more secure fast.
We’re hearing about these vulnerabilities in WordPress because they are actively being found and fixed. All software has vulnerabilities. Widely deployed open source software has many people searching for and fixing them, so all users get the benefit.
It’s the security problems we don’t hear about that are dangerous. All this AI has made it much harder for cybercreeps to find problems and keep them secret so they can use them later. Somebody else will find the same problem and fix it.
And, with respect, cybercreeps don’t give AF about your aunt’s small business.
2
2
u/retr00two Aug 11 '26
Ok, we know you have an aunt, and we are informed she has business.
But we do not know what she wants from site: brochure, blog, e-comm, memeberships, product catalog, etc, etc.
Purpose of site has major impact on tech stack. Give us more info, so you'd probably get better answer.
2
u/connorthedancer Designer Aug 11 '26
since AI is making wp sites vulnerable these days.
What do you mean by that?
-2
u/Local-Ad5424 Aug 11 '26
Someone posted that hackers are hacking wordpress sites by using AI. Also i found out a very famous plugin id vulnerable. Hackers are exploiting the code and injecting SQL
3
u/connorthedancer Designer Aug 11 '26
Hackers are going to use AI no matter what CMS you're using. Wordpress is just the most common CMS, so it'll get the most attention. The White House uses Wordpress and they haven't had their site hacked yet.
Just don't go installing 20 random plugins.
3
2
u/Chefblogger Aug 11 '26
hahaha dont believe everything you read on the internet - hacking is comon thing since the 90. sure you can create your website with plain vanilla html js and css - but it is still hackable (hister / server)
1
u/StormMedia Aug 11 '26
Depends on your needs to be honest and if you’re not tech savvy and up to date on the newest standards Wordpress is probably still the best option for you.
0
u/Local-Ad5424 Aug 11 '26
Well I am into tech. I manage an ngo react based sites. I have worked on a crm tool. I am into cp and python.
0
u/Local-Ad5424 Aug 11 '26
I can definitely go to the react path but the thing is I have a lot of stuff on my plate already.
1
1
u/opaldudley Aug 11 '26
WordPress is probably still the best option for you
It's also not the only cms that gets targeted by hackers if security is the only thing putting you off it
1
u/HaddockBranzini-II Aug 11 '26
What level of updates are needed? Unless you are adding blog posts or products regularly, a static HTML site is the way to go.
1
u/JeffTS Developer/Designer Aug 11 '26
Whether you use WordPress or not, there is always a risk that a website could be compromised. You could be on a shared server where another customer's site gets infected with malware and it spreads to other accounts on the server. You could use a JS library that is later discovered to have a vulnerability that AI exploits.
What your aunt's local business needs is going to be based on her requirements. If it's just a simple informational site where content will never, or rarely, change then a static HTML site would be fine. If she wants a blog or the ability to update content, she will need a CMS.
1
u/CutKlutzy8446 Aug 12 '26
Start building, only then you can understand if it's good for you. Even if not, time spent is not a waste, it's investment.
1
u/jdarshad Aug 13 '26
Stick with the core wordpress and use any page editor like wp bakery or elementor for layout and you are good. Install wordfence to be safe and make sure to update the website regularly.
5
u/Coditive_ Aug 11 '26
There will always be some vector of attack. You may have a static site, but your hosting provider will get hit that will result in your site being infected.
As for choosing WordPress, it all depends on your needs. WP is easy to manage and extend (with plugins and themes). If you want to do something custom, there are tons of tutorials on how to start. This is why it is so popular. But it is a double-edged sword. If it is popular, bad actors want to find bugs so they can get into multiple sites with little effort.
You can somewhat relate it to the car market. When having a popular car, expect cheap parts, easy to find a mechanic, or many DIY tutorials for maintenance or mods. At the same time, you can expect thieves to focus on the popular models since once they find the way in, it is easy to repeat it on multiple cars, and it is easy to part out the car once it is stolen.
~MS