Is wordpress.com hackable

• 

  cage108 · Member · Jan 26, 2015 at 6:35 am

  • Copy link
  • Add topic to favorites

  Hi,

  I used to run wordpress.org until last week. My site was repeatedly hacked so I have decided to bring my content into the .com environment.

  My question is, apart from user error like not keeping passwords safe, can a wordpress.com blog be hacked?

  Thanks

  cage

• 

  justjennifer · Member · Jan 26, 2015 at 7:30 am

  • Copy link

  Reading some previous forum threads might help answer your question https://en.forums.wordpress.com/search.php?q=hacked

  Here’s some info about Security

  Keep Your Site Safe and Secure

• 

  cage108 · Member · Jan 26, 2015 at 8:01 am

  • Copy link

  Hi Justjennifer,

  Thank you for the quick reply. I might be missing something… I’ve read through the links you provided. The forums mostly have questions from .org users who have posted in the wrong forum. Those that are not clear if they are .com or .org users are not told that a .com site cannot be hacked ( or confirming that it is hacked ). When I talk about hacking I’m specifically referring to hackers uploading malicious code into the site to spam or take control of the content.

  The security link you provided also just seems to be a “how to” for keeping passwords safe etc and precautions to take.

  At this point I dont think it will make a difference either way as I have to move away from the .org platform as I do not have the knowledge to fend off the attacks myself nor the money to pay someone to do it. But is there a possibility that I will have the same problem here?

  Thanks for your time,

  cage

• 

  justjennifer · Member · Jan 27, 2015 at 7:25 am

  • Copy link

  The short version: code injection is not really a worry here.

  The very few times I have seen WPcom users complain in the forums about “hacking” is when:
  A. users are using the “post by email” feature and their email account is hacked.
  B. users employ unsafe practices, like password sharing, remaining logged in while they are out, having 2+ Admins on a site, etc.

  As you already have noticed, the key word here is “users”.

  Since you haven’t linked to your self-hosted WP site, I would encourage you to read the Terms of Service closely (along with the Types of Blogs document linked there) to see if WPcom is a good fit for you. Also, http://en.support.wordpress.com/com-vs-org/ will help explain a bit more about what WPcom can and cannot do and the Support doc on advertising too. http://en.support.wordpress.com/advertising/

  Hope that helps.

• 

  cage108 · Member · Jan 27, 2015 at 8:00 am

  • Copy link

  Awesome… your short version is exactly what I needed to hear.

  Thanks a mill…