WordPress Had 11,334 Plugin Vulnerabilities Last Year. Cloudflare Just Built the Fix.

Noble Pilot
Thu, 02 Apr 2026 16:15:43 GMT
webdev, discuss, javascript, programming

WordPress runs almost half of the websites on the internet. However, 96% of the security vulnerabilities it faces come from various plugins that keep everything running smoothly. EmDash, an open-source CMS developed by Cloudflare and launched just recently, was developed from the ground up using TypeScript to serve as a WordPress replacement. And the very first problem they solved was the biggest one that WordPress couldn't. The plugin model. Every Plugin Gets the Keys to Everything In technical terms, when you implement a plugin in WordPress, it is granted complete access to your file system and database, that is the case for each and every other plugin as well. There is no isolation, sandbox, or limitations regarding its capabilities. Want to install a simple contact form? Technically, this grants the plugin access to your entire website's data. Your entire database could be wiped by a mere oversight by the developer who made said plugin. Your trust in these developers is WordPress's