🌐 I've used WordPress for 20 years, and I've stopped recommending it
｢ Every WordPress plugin runs inside the same PHP process as core, with the same access to your database and files. A slider plugin can read your users table. A form plugin can send your data to any server on the internet. There is no permission prompt and no way to limit what a plugin can touch. The amount of sandboxing is zero ｣
https://hatamoto.dev/post/wordpress-20-years-why-we-built-hatamoto
