Plugging into WordPress security


As some of you might already know, I’ve also been a blogger for ages. Since 2005, I’ve played with nearly a dozen blogging accounts from LiveJournal to MySpace to Blogger to WordPress to Connections. But by far, my favorite platform is WordPress.

Hi, my name is Jay, and I’m an IBM TRIRIGA information developer at IBM. With nearly half a million employees worldwide, IBM easily has thousands of teams of all shapes and sizes. So I’m not surprised to hear recently that a few IBM teams might be migrating areas of their social media sites from Connections to WordPress. While I love the WordPress interface, I also understand the concerns that other colleagues might have about the security issues in WordPress, particularly in its plugins.

Jay's WordPress "word cloud" (Wordle.net)

Jay’s WordPress “word cloud” (Wordle.net)

But here’s the thing about plugins. Just like installing and uninstalling fun or functional third-party apps on your smartphone, you can also install and uninstall fun or functional third-party plugins on your WordPress.org blog. In other words, your blog is only as strong as its weakest plugin. Fortunately, there are countermeasures. You can uninstall your weaker plugins, and you can also install security plugins.
Continue reading