[sanswork]

Having a general purpose blog system on the same server(and sharing the same database credentials and having the ability to write files) is a security risk it has nothing to do with the availability of php.

[ukigumo]

My point exactly. If instead of wordpress they had a copy of some other big-old-java-thingie it would have been just as exploitable.