WordPress
WordPress is an open-source content management system (CMS) built on PHP and MySQL, originally designed as a blogging platform and later evolved into a general-purpose website-building tool. It provides visual content editing, theme template customization, and a plugin extension mechanism, supporting the creation and management of various website types including personal blogs, corporate sites, and e-commerce stores. Its extensive plugin ecosystem allows users to build basic websites without programming knowledge.
Core Facts
In production environments, plugin updates should be validated in a test environment first, and plugin versions should be managed carefully
Matt Mullenweg is the co-founder and CEO of Automattic.
Automattic is the parent company of internet products including WordPress.com and Tumblr, and was founded in 2005.
Timeline (last 90 days)
A large number of CMSs (such as WordPress, Drupal, and Joomla) and e-commerce frameworks (such as WooCommerce and Magento) are built on PHP.
PHP is a server-side scripting language, and about three-quarters of websites use it to build content management systems (such as WordPress), frameworks (such as Laravel), or to write business logic directly, which is why it is called "the default language of the Web."
The PHP runtime permeates almost every corner of the web technology stack, from content management systems such as WordPress and Drupal, to modern frameworks such as Laravel and Symfony, to a large number of legacy in-house systems.
Statistics show that a considerable proportion of WordPress site compromises stem from known vulnerabilities in outdated plugins or themes rather than the CMS core itself.
CMSes (content management systems) include WordPress, Joomla, Drupal, and others, providing ready-made site building, user registration, and content publishing features, but part of the security responsibility shifts to the plugin and theme ecosystem.
LinkedEmbed officially states support for integration with mainstream site-building platforms such as WordPress, Webflow, Wix, Shopify, and Squarespace.
On October 21, PHP released a patch fixing two high-severity vulnerabilities that allowed attackers to run code on servers without logging in; a large number of websites such as WordPress depend on the language.
About 70% of websites worldwide depend on PHP to run, including WordPress, Facebook's early architecture and Wikipedia, among others.
PHP's ubiquity gives its security incidents an amplifying effect: a single runtime flaw can affect millions of websites along the dependency chain.
For sites using CMSs such as WordPress and Drupal, upstream security advisories should be monitored, because CMS vendors typically follow up with compatibility guidance.
40 more timeline events
All Facts (20)
In production environments, plugin updates should be validated in a test environment first, and plugin versions should be managed carefully
90%VerifiedMatt Mullenweg is the co-founder and CEO of Automattic.
80%VerifiedAutomattic is the parent company of internet products including WordPress.com and Tumblr, and was founded in 2005.
80%VerifiedAutomattic operates WordPress.com and is deeply involved in the development of the open-source WordPress project.
70%VerifiedAI security auditing tools face prompt injection threats, where malicious developers can embed instructions in code comments or strings to induce the tool to overlook vulnerabilities
65%VerifiedWordPress introduced the Gutenberg block editor starting from version 5.0, in which the 'Custom HTML' block allows direct insertion of raw HTML/CSS/JavaScript code.
65%VerifiedWordPress adopts a theme + plugin extension architecture, with core files responsible only for the basic framework.
65%VerifiedThe default database table prefix in WordPress is wp_.
65%VerifiedWordPress presets content types such as Post and Page, and provides the Gutenberg editor as a general-purpose content editing interface.
65%Unverified在Nginx中，WordPress伪静态规则本质是try_files $uri $uri/ /index.php?$args;这条指令
90%UnverifiedSimpleNote是Automattic（WordPress母公司）旗下的轻量级笔记应用，以纯文本存储著称
90%UnverifiedLNMP环境（Linux + Nginx + MySQL + PHP）是运行WordPress的标准服务端组合
80%Unverified2000年代中期，WordPress等CMS率先将内容与展示逻辑分离，让非技术用户能够管理内容
80%Partially VerifiedMatt Mullenweg is one of the core creators of WordPress, the open-source content management system.
65%UnverifiedPHP's ubiquity gives its security incidents an amplifying effect: a single runtime flaw can affect millions of websites along the dependency chain.
60%UnverifiedThe WordPress Foundation nominally holds the WordPress trademark and promotes the open-source cause.
60%UnverifiedWordPress is developed based on the PHP language, using MySQL as the data storage backend.
60%UnverifiedPHP is a server-side scripting language, and about three-quarters of websites use it to build content management systems (such as WordPress), frameworks (such as Laravel), or to write business logic directly, which is why it is called "the default language of the Web."
50%UnverifiedA large number of CMSs (such as WordPress, Drupal, and Joomla) and e-commerce frameworks (such as WooCommerce and Magento) are built on PHP.
50%UnverifiedThe PHP runtime permeates almost every corner of the web technology stack, from content management systems such as WordPress and Drupal, to modern frameworks such as Laravel and Symfony, to a large number of legacy in-house systems.
50%