* > > you had a problem with a badly written wordpress plugin
> The plugin is top 10 popular one*
Popular !== Good
(where in this case good is in the context of being well written)
> so hacker found a exploit, crafted a parameter aginst one particular .php, and got in
That could happen with almost any laguage/framework though. While PHP makes it easy to write bad code (as do other options) it doesn't make it impossible to write secure code and you can't blame PHP and/or Wordpress for every bad plugin out there, even the massively popular ones.
Popular !== Good (where in this case good is in the context of being well written)
> so hacker found a exploit, crafted a parameter aginst one particular .php, and got in
That could happen with almost any laguage/framework though. While PHP makes it easy to write bad code (as do other options) it doesn't make it impossible to write secure code and you can't blame PHP and/or Wordpress for every bad plugin out there, even the massively popular ones.