What Is WordPress - Non Geek Speak

WordPress is a program or app (more commonly known as a Content Management System or CMS), and to extend its capabilities, like a large opening slider or slideshow, for example, you add plugins to it. You also have a theme, which is the look and feel.

WordPress itself is open source, thus it is free. This means that the code is open for anyone to view or modify. It is written in a code called PHP. According to Wikipedia, PHP is a general-purpose scripting language geared towards web development. The basic installation of WordPress is often referred to as the core.

As stated above, to extend WordPress’ core capabilities, you can add a plugin, a software component that adds new functionality or enhances existing functionality on a WordPress website without requiring coding. If you want to make your WordPress website an e-commerce store, then you might add a plugin like WooCommerce to it. WooCommerce includes everything you need to start selling products on your website.

A theme is the website’s look and feel; it is what makes the website look the way it does.

Some plugins and themes cost money to either purchase, use, or upgrade. Just like Microsoft Windows, which has free apps and premium apps that cost you money to use (like MS Office). All these apps, plugins, and themes have updates that either fix vulnerabilities or add features.

WordPress typically updates several times a quarter. You can see a history of updates since 2003 here.

Plugins update depending on the developer (s), whether they are adding a feature or function, or fixing a vulnerability. I will use a “Premium” plugin (meaning you have to purchase a license to use it) called Slider Revolution as an example for this post. In the case of Slider Revolution, the plugin is used on the main page as a slideshow or video.

In the past 365 days (as of this posting), Slider Revolution has had 11 known vulnerabilities (it may sound like a lot, but it is about average for most code). This means that if you are using this plugin and not paying for updates, your website is vulnerable to hackers. A vulnerability is simply a hole that a skilled hacker can exploit to get into the code and likely work their way into your website itself.

Most often, they deface the website, hold it hostage, or add code to it, so your visitors get malware. Imagine a visitor to your website who is a potential client gets a virus on their computer because of your site. That is not good business and puts your business at risk. That is why it is important to update your WordPress installation, themes, and plugins.

I know this may sound like WordPress is a bad thing, but honestly, this is how all software works. A vulnerability is just a way of life. Most often, it is caused by an oversight from the developer or the person who coded the software.