Post

As far as I can tell, the AWS Lightsail blueprints for WordPress are still not updated, and they are not self-servicable within the instance. Is this correct? I cannot find any information on when (or if) AWS plans to update the WordPress blueprints they provide.

I am literally a security professional and I am having trouble finding clear, unambiguous info about *how* to update this, and what level of support to expect from AWS/others. WordPress powers 40% of the Internet, and I cannot imagine how the average site operator can be expected to handle this.

This is not an obscure use case! Lots of people run WordPress on AWS Lightsail. It's ~90% of the pitch of the entire product! The fact that I'm not seeing more people ask about this makes me concerned that people outside infosec circles are not really grasping the magnitude of this vuln.

Tbqh I would take your sites down and replace them with a static page until the Lightsail blueprints get updated