this post was submitted on 23 Jul 2026
96 points (97.1% liked)

Selfhosted

60934 readers
861 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

7.0.2 got released on Friday. Exploits are already happening. People reporting hacks

top 21 comments
sorted by: hot top controversial new old
[–] CausticFlames@sopuli.xyz 24 points 2 days ago (2 children)

Friendly reminder to anyone who cares enough that you can still use WordPress to make your site with all your fancy plugins and layouts, and then export that to a static site for hosting. No need to actually host Wordpress itself that way you avoid nearly all of this BS.

[–] LunarLoony@lemmy.sdf.org 10 points 2 days ago (1 children)

Not a bad idea. How would one do this?

[–] CausticFlames@sopuli.xyz 8 points 1 day ago

Simply Static is currently the most actively maintained solution, as a plugin for wp:
https://docs.simplystatic.com/category/6-user-guides

There is also WP2Static, which is a very long standing project: https://github.com/elementor/wp2static

[–] yuman@programming.dev 1 points 1 day ago

this thing here. I've dramatically reduced support work at two shops I've set this up for. incidents went from from coupla times a month to once a year. not to mention - you don't need no VPS no more, don't need no database, nothing, the simplest web hosting will do and it's very cache friendly.

[–] ThanksObama@sh.itjust.works 23 points 2 days ago (4 children)

Correction: WordPress IS a critical vulnerability.

[–] ctenidium@lemmy.world 1 points 1 day ago

Elementor makes it worse though.

[–] 9point6@lemmy.world 16 points 2 days ago (1 children)

JFC I thought you were exaggerating.

[–] SreudianFlip@sh.itjust.works 5 points 2 days ago

Anyone who hosts websites can check the logs and see the bots hammering away at wp/admin primarily, even if you are not running any WordPress. Low hanging meat? Fresh fruit?

[–] Marthirial@lemmy.world -2 points 2 days ago (4 children)

I have developed and hosted over 760 WP sites since 2006 and have never been hacked. Ever.

Mediocre craftspeople blame their tools.

[–] kungen@feddit.nu 11 points 2 days ago

I've driven a poorly designed car without many safety features for years, and I've never flown through the windshield, ever.

[–] LunarLoony@lemmy.sdf.org 5 points 2 days ago

How do you know?

[–] genzboomer@lemmy.zip 5 points 2 days ago

Professionals are never cocky. Cocky comes back to bite.

[–] loo@lemmy.world 7 points 2 days ago

Glad you got lucky. But a tool having one critical vulnerability after another has nothing to do with mediocre craftsmanship and blaming admins for getting hacked after updating their software is nothing but disrespectful and condescending

[–] xzinik@feddit.cl 2 points 2 days ago

thank god i was able to convince my boss to let go the old wordpress site and only serve static pages when he wanted to have a brand new design, its been about 2months with the new design

[–] lIlIlIlIlIlIl@lemmy.world 3 points 2 days ago (1 children)

It’s time to ditch WP if you haven’t already

[–] non_burglar@lemmy.world 7 points 2 days ago (1 children)
[–] kohlenstoff@feddit.org 1 points 1 day ago (1 children)

What would you recommend as an alternative for the non-technical inclined users who want to have a public website?

[–] non_burglar@lemmy.world 1 points 1 day ago (1 children)

Is this a trick question?

Websites are complicated. Easy, secure, cheap: pick two. There is no such thing as a universally easy, secure and cheap solution, or else we would always be using it.

Assuming you want secure and easy, I would suggest you pay someone who knows what they're doing.

[–] kohlenstoff@feddit.org 1 points 1 day ago (1 children)

No, not a trick question at all.

I know what I am doing but people I work for do not, therefore my question for an alternative where these people can write text on a simple website in a WYSIWYG editor. Going by your comment you haven't found one either which makes WP sadly the only option for this specific use case.

[–] non_burglar@lemmy.world 2 points 16 hours ago

I haven't found one, no. I just use markdown and a static HTML site generator.