The 2026 WordPress security math flipped, and I build plugins for a living

Before I shipped my own AI chatbot plugin, I put it through a security review. It came back with 35 bugs, three of them critical, and the one that made my stomach drop was an HTML injection flowing st