According to this wiki article (chapter):http://en.wikipedia.org/wiki/Plone_(software)#Focus_on_SecurityFrom 2010 there has not been a single vulnerability.Is this true and Plone is the most secure (among the CMS compared)?
Is Plone really without security holes as Wiki article suggests?
wordpress;security;joomla;drupal;plone
Vulnerability are discovered either by user or by security researched who are looking to make a name for themselves. The co-relation between number of users/vulnerabilities found is only a part of the whole equation. Most vulnerabilities are discovered by security professionals or hackers. For them WordPress is the most lucrative prize, which can explains the numbers. What this also means is:A. Despite the immediate reaction to these statistics, WP is more secure than it looks, because discovered vulnerabilities are often patched. B. Malicious hackers will not publicize the exploits they use, at least not they had some fun. For example, the recent Plesk vulnerability was announced in Jun but here in Incapsula we've been blocking such attack from February. (by generic rules) In this respect, Plone might be much less secure than it looks...C. If you are using a popular CMS, which gets a lot of attention, you should always keep it up-to-date because there a lot of people who`ll use automation to fish for for newly discovered vulnerabilities. Good example here is TimThumb. Thought discovered back in 2011, we still see a LOT of TimThum scanners roaming around the net and one can only assume that they keep doing it because they keep discovering new targets.