blog.cloudflare.com 4/1/2026, 4:32:02 PM · via preferred

Introducing EmDash — the spiritual successor to WordPress that solves plugin security

Introducing EmDash — the spiritual successor to WordPress that solves plugin security
CyberSIXT Evidence Panel Source marked as original reporting

EMDASH is Cloudflare’s open‑source, MIT‑licensed CMS described as the spiritual successor to WordPress, written entirely in TypeScript and powered by Astro. It runs serverless by default but can be deployed on your own hardware or any platform, with plugins securely sandboxed to operate in isolated Dynamic Workers using capabilities bound in their manifest.

The article stresses that WordPress plugins historically “originate in plugins” for 96% of security issues and that EmDash solves this by restricting what plugins can do and by running them in a sandboxed environment. EmDash also supports x402 payments built in, letting sites charge for access to content on a pay‑as‑you‑go basis without subscriptions.

It scales to zero on Cloudflare’s platforms, using the v8 isolate architecture of workerd and only billing for actual CPU time, while remaining extendable to any Node[.]js server. Finally, it positions EmDash as an AI‑friendly, programmable CMS with tools such as an MCP server, an EmDash CLI, and agent skills to help automate management and content import from WordPress.

View full article

Article by CyberSIXT