Joomla makes WP look like Fort Knox.

It has its share of vulnerabilities but flaws in core are rarer, more (a lot more) (i swear to god a LLM would be better) in the modules ecosystem. Also like most CMSes they are still vulnerable to what i call the "webapp bug" (you install this blob on a hosting that should not be aware of what you dump on there and allows you to run a php file on any subdir, while with a CMS, whatever you use, only a very limited number of files should be allowed to be reached, executed or even included in any php call).

	▲	bombcar 15 hours ago \| parent [-]
		All I remember with Joomla! is that it was really, really susceptible to the “plugin we use is abandoned and not updated and the new version of core is completely incompatible” causing everyone to run various out of date packages with stupid security layered on top. Web application firewalls are an abomination.

▲

rmoriz a day ago | parent | prev [-]

Never forget PHPnuke and phpmyadmin

▲

pmlnr 13 hours ago | parent [-]

The internet was different when those two were conceived.

	▲	tosti 10 hours ago \| parent [-]
		Easier to pwn.