{"id":"youtube:cxACne9TxEM","source":"youtube","sourceId":"cxACne9TxEM","account":"external-appearances","type":"video","title":"Is WordPress safe after PHP2Shell? Our take","body":"PHP2Shell is a critical PHP vulnerability rated 9.2 out of 10. Why we avoid monolithic WordPress, how a headless Next.js and Sanity stack keeps the surface area small, and the open source starter we use to spin one up.","bodyFormat":"text","sourceUrl":"https://www.youtube.com/watch?v=cxACne9TxEM","canonicalUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take","sourceUrls":["https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"],"authorIds":[],"publishedAt":"2026-10-23T00:00:00.000Z","checkedAt":"2026-10-26T04:00:25.839Z","language":"en","visibility":"public","topics":["sanity","nextjs"],"gaps":[],"segments":[{"id":"segment-1","startMs":3110,"endMs":3120,"text":"Holy moly, [laughter]"},{"id":"segment-2","startMs":3120,"endMs":7430,"text":"Holy moly, [laughter]\nwhat a day. So, PHP has had a critical"},{"id":"segment-3","startMs":7430,"endMs":7440,"text":"what a day. So, PHP has had a critical"},{"id":"segment-4","startMs":7440,"endMs":9589,"text":"what a day. So, PHP has had a critical\nvulnerability. When you know it's a"},{"id":"segment-5","startMs":9589,"endMs":9599,"text":"vulnerability. When you know it's a"},{"id":"segment-6","startMs":9599,"endMs":11509,"text":"vulnerability. When you know it's a\ncritical vulnerability is when the FBI"},{"id":"segment-7","startMs":11509,"endMs":11519,"text":"critical vulnerability is when the FBI"},{"id":"segment-8","startMs":11519,"endMs":14150,"text":"critical vulnerability is when the FBI\ngets involved. So, if you don't know,"},{"id":"segment-9","startMs":14150,"endMs":14160,"text":"gets involved. So, if you don't know,"},{"id":"segment-10","startMs":14160,"endMs":15669,"text":"gets involved. So, if you don't know,\nbasically, you have to perform an"},{"id":"segment-11","startMs":15669,"endMs":15679,"text":"basically, you have to perform an"},{"id":"segment-12","startMs":15679,"endMs":17670,"text":"basically, you have to perform an\nimmediate update. And it's recommended"},{"id":"segment-13","startMs":17670,"endMs":17680,"text":"immediate update. And it's recommended"},{"id":"segment-14","startMs":17680,"endMs":19349,"text":"immediate update. And it's recommended\nthat if you can't perform an immediate"},{"id":"segment-15","startMs":19349,"endMs":19359,"text":"that if you can't perform an immediate"},{"id":"segment-16","startMs":19359,"endMs":21029,"text":"that if you can't perform an immediate\nupdate, you should probably take the"},{"id":"segment-17","startMs":21029,"endMs":21039,"text":"update, you should probably take the"},{"id":"segment-18","startMs":21039,"endMs":23109,"text":"update, you should probably take the\nentire website offline. If you want to"},{"id":"segment-19","startMs":23109,"endMs":23119,"text":"entire website offline. If you want to"},{"id":"segment-20","startMs":23119,"endMs":25670,"text":"entire website offline. If you want to\nknow how bad this thing is, the CVSS"},{"id":"segment-21","startMs":25670,"endMs":25680,"text":"know how bad this thing is, the CVSS"},{"id":"segment-22","startMs":25680,"endMs":28230,"text":"know how bad this thing is, the CVSS\nscale is rated out of 10, and this is a"},{"id":"segment-23","startMs":28230,"endMs":28240,"text":"scale is rated out of 10, and this is a"},{"id":"segment-24","startMs":28240,"endMs":29750,"text":"scale is rated out of 10, and this is a\n9.2."},{"id":"segment-25","startMs":29750,"endMs":29760,"text":"9.2."},{"id":"segment-26","startMs":29760,"endMs":32709,"text":"9.2.\nSo [laughter] it's pretty bad. So what I"},{"id":"segment-27","startMs":32709,"endMs":32719,"text":"So [laughter] it's pretty bad. So what I"},{"id":"segment-28","startMs":32719,"endMs":34229,"text":"So [laughter] it's pretty bad. So what I\nwant to talk to you about today is the"},{"id":"segment-29","startMs":34229,"endMs":34239,"text":"want to talk to you about today is the"},{"id":"segment-30","startMs":34239,"endMs":37190,"text":"want to talk to you about today is the\nreason why we build headless and why I"},{"id":"segment-31","startMs":37190,"endMs":37200,"text":"reason why we build headless and why I"},{"id":"segment-32","startMs":37200,"endMs":39750,"text":"reason why we build headless and why I\nwould avoid a monolithic system like"},{"id":"segment-33","startMs":39750,"endMs":39760,"text":"would avoid a monolithic system like"},{"id":"segment-34","startMs":39760,"endMs":42709,"text":"would avoid a monolithic system like\nWordPress which is PHPbased because of"},{"id":"segment-35","startMs":42709,"endMs":42719,"text":"WordPress which is PHPbased because of"},{"id":"segment-36","startMs":42719,"endMs":44950,"text":"WordPress which is PHPbased because of\nmainly this reason. If you don't know"},{"id":"segment-37","startMs":44950,"endMs":44960,"text":"mainly this reason. If you don't know"},{"id":"segment-38","startMs":44960,"endMs":46549,"text":"mainly this reason. If you don't know\nWordPress has been around for a long"},{"id":"segment-39","startMs":46549,"endMs":46559,"text":"WordPress has been around for a long"},{"id":"segment-40","startMs":46559,"endMs":47830,"text":"WordPress has been around for a long\nlong period of time. I think it's coming"},{"id":"segment-41","startMs":47830,"endMs":47840,"text":"long period of time. I think it's coming"},{"id":"segment-42","startMs":47840,"endMs":49590,"text":"long period of time. I think it's coming\nup to either its 20th birthday or it"},{"id":"segment-43","startMs":49590,"endMs":49600,"text":"up to either its 20th birthday or it"},{"id":"segment-44","startMs":49600,"endMs":52310,"text":"up to either its 20th birthday or it\n20th birthday's past and it's been one"},{"id":"segment-45","startMs":52310,"endMs":52320,"text":"20th birthday's past and it's been one"},{"id":"segment-46","startMs":52320,"endMs":54069,"text":"20th birthday's past and it's been one\nof the most fundamental parts of"},{"id":"segment-47","startMs":54069,"endMs":54079,"text":"of the most fundamental parts of"},{"id":"segment-48","startMs":54079,"endMs":55590,"text":"of the most fundamental parts of\nblogging on the web for god knows how"},{"id":"segment-49","startMs":55590,"endMs":55600,"text":"blogging on the web for god knows how"},{"id":"segment-50","startMs":55600,"endMs":56869,"text":"blogging on the web for god knows how\nlong. It makes up such a substantial"},{"id":"segment-51","startMs":56869,"endMs":56879,"text":"long. It makes up such a substantial"},{"id":"segment-52","startMs":56879,"endMs":59110,"text":"long. It makes up such a substantial\namount of the internet. However, because"},{"id":"segment-53","startMs":59110,"endMs":59120,"text":"amount of the internet. However, because"},{"id":"segment-54","startMs":59120,"endMs":60709,"text":"amount of the internet. However, because\nit's monolithic, it has a lot of"},{"id":"segment-55","startMs":60709,"endMs":60719,"text":"it's monolithic, it has a lot of"},{"id":"segment-56","startMs":60719,"endMs":61990,"text":"it's monolithic, it has a lot of\ndifferent systems that are involved in"},{"id":"segment-57","startMs":61990,"endMs":62000,"text":"different systems that are involved in"},{"id":"segment-58","startMs":62000,"endMs":65830,"text":"different systems that are involved in\nit. So, you have the login, you have the"},{"id":"segment-59","startMs":65830,"endMs":65840,"text":"it. So, you have the login, you have the"},{"id":"segment-60","startMs":65840,"endMs":68070,"text":"it. So, you have the login, you have the\nplugins, you have a whole host of"},{"id":"segment-61","startMs":68070,"endMs":68080,"text":"plugins, you have a whole host of"},{"id":"segment-62","startMs":68080,"endMs":69109,"text":"plugins, you have a whole host of\ndifferent things. A lot of people keep"},{"id":"segment-63","startMs":69109,"endMs":69119,"text":"different things. A lot of people keep"},{"id":"segment-64","startMs":69119,"endMs":71590,"text":"different things. A lot of people keep\ntheir forms in there. They have user"},{"id":"segment-65","startMs":71590,"endMs":71600,"text":"their forms in there. They have user"},{"id":"segment-66","startMs":71600,"endMs":73750,"text":"their forms in there. They have user\nmanagement where it's really quite"},{"id":"segment-67","startMs":73750,"endMs":73760,"text":"management where it's really quite"},{"id":"segment-68","startMs":73760,"endMs":75910,"text":"management where it's really quite\nextensive. All of that is handled in a"},{"id":"segment-69","startMs":75910,"endMs":75920,"text":"extensive. All of that is handled in a"},{"id":"segment-70","startMs":75920,"endMs":77910,"text":"extensive. All of that is handled in a\nmonolithic system. On the other hand,"},{"id":"segment-71","startMs":77910,"endMs":77920,"text":"monolithic system. On the other hand,"},{"id":"segment-72","startMs":77920,"endMs":79510,"text":"monolithic system. On the other hand,\nyou have a headless system. And a"},{"id":"segment-73","startMs":79510,"endMs":79520,"text":"you have a headless system. And a"},{"id":"segment-74","startMs":79520,"endMs":82230,"text":"you have a headless system. And a\nheadless system is probably usually a"},{"id":"segment-75","startMs":82230,"endMs":82240,"text":"headless system is probably usually a"},{"id":"segment-76","startMs":82240,"endMs":83749,"text":"headless system is probably usually a\nwebsite. I'm going to say Nex.js JS cuz"},{"id":"segment-77","startMs":83749,"endMs":83759,"text":"website. I'm going to say Nex.js JS cuz"},{"id":"segment-78","startMs":83759,"endMs":85270,"text":"website. I'm going to say Nex.js JS cuz\nthat's the ones that we build. But you"},{"id":"segment-79","startMs":85270,"endMs":85280,"text":"that's the ones that we build. But you"},{"id":"segment-80","startMs":85280,"endMs":87030,"text":"that's the ones that we build. But you\ncould have React Router, you could have"},{"id":"segment-81","startMs":87030,"endMs":87040,"text":"could have React Router, you could have"},{"id":"segment-82","startMs":87040,"endMs":88550,"text":"could have React Router, you could have\nAstro, any of these different"},{"id":"segment-83","startMs":88550,"endMs":88560,"text":"Astro, any of these different"},{"id":"segment-84","startMs":88560,"endMs":90950,"text":"Astro, any of these different\nframeworks. But basically that sits on a"},{"id":"segment-85","startMs":90950,"endMs":90960,"text":"frameworks. But basically that sits on a"},{"id":"segment-86","startMs":90960,"endMs":94149,"text":"frameworks. But basically that sits on a\nvery very narrow surface area versus"},{"id":"segment-87","startMs":94149,"endMs":94159,"text":"very very narrow surface area versus"},{"id":"segment-88","startMs":94159,"endMs":96469,"text":"very very narrow surface area versus\nWordPress which is a huge surface area."},{"id":"segment-89","startMs":96469,"endMs":96479,"text":"WordPress which is a huge surface area."},{"id":"segment-90","startMs":96479,"endMs":97830,"text":"WordPress which is a huge surface area.\nAnd we'll come back to why that might be"},{"id":"segment-91","startMs":97830,"endMs":97840,"text":"And we'll come back to why that might be"},{"id":"segment-92","startMs":97840,"endMs":100310,"text":"And we'll come back to why that might be\na problem in a second. So in comparison"},{"id":"segment-93","startMs":100310,"endMs":100320,"text":"a problem in a second. So in comparison"},{"id":"segment-94","startMs":100320,"endMs":102469,"text":"a problem in a second. So in comparison\non headless then you get to pick and"},{"id":"segment-95","startMs":102469,"endMs":102479,"text":"on headless then you get to pick and"},{"id":"segment-96","startMs":102479,"endMs":105030,"text":"on headless then you get to pick and\nchoose whatever you want as a backend."},{"id":"segment-97","startMs":105030,"endMs":105040,"text":"choose whatever you want as a backend."},{"id":"segment-98","startMs":105040,"endMs":106469,"text":"choose whatever you want as a backend.\nYou get to pick and choose whatever you"},{"id":"segment-99","startMs":106469,"endMs":106479,"text":"You get to pick and choose whatever you"},{"id":"segment-100","startMs":106479,"endMs":109030,"text":"You get to pick and choose whatever you\nwant as a form or whatever all these"},{"id":"segment-101","startMs":109030,"endMs":109040,"text":"want as a form or whatever all these"},{"id":"segment-102","startMs":109040,"endMs":111190,"text":"want as a form or whatever all these\ndifferent functionalities. user uh"},{"id":"segment-103","startMs":111190,"endMs":111200,"text":"different functionalities. user uh"},{"id":"segment-104","startMs":111200,"endMs":112469,"text":"different functionalities. user uh\nmanagement. You can use things like"},{"id":"segment-105","startMs":112469,"endMs":112479,"text":"management. You can use things like"},{"id":"segment-106","startMs":112479,"endMs":114310,"text":"management. You can use things like\nclerk. All of these things are pick and"},{"id":"segment-107","startMs":114310,"endMs":114320,"text":"clerk. All of these things are pick and"},{"id":"segment-108","startMs":114320,"endMs":115990,"text":"clerk. All of these things are pick and\nchoose. You pick the best one in the"},{"id":"segment-109","startMs":115990,"endMs":116000,"text":"choose. You pick the best one in the"},{"id":"segment-110","startMs":116000,"endMs":119030,"text":"choose. You pick the best one in the\nindustry and you essentially bolt it on."},{"id":"segment-111","startMs":119030,"endMs":119040,"text":"industry and you essentially bolt it on."},{"id":"segment-112","startMs":119040,"endMs":121670,"text":"industry and you essentially bolt it on.\nNow, why is this important when we say"},{"id":"segment-113","startMs":121670,"endMs":121680,"text":"Now, why is this important when we say"},{"id":"segment-114","startMs":121680,"endMs":123190,"text":"Now, why is this important when we say\nthat we're going to use something like a"},{"id":"segment-115","startMs":123190,"endMs":123200,"text":"that we're going to use something like a"},{"id":"segment-116","startMs":123200,"endMs":126469,"text":"that we're going to use something like a\nmicro service like in the example of a"},{"id":"segment-117","startMs":126469,"endMs":126479,"text":"micro service like in the example of a"},{"id":"segment-118","startMs":126479,"endMs":129510,"text":"micro service like in the example of a\nCMS like Sanity or Contentful or God"},{"id":"segment-119","startMs":129510,"endMs":129520,"text":"CMS like Sanity or Contentful or God"},{"id":"segment-120","startMs":129520,"endMs":130630,"text":"CMS like Sanity or Contentful or God\nforbid you're stuck with it, but"},{"id":"segment-121","startMs":130630,"endMs":130640,"text":"forbid you're stuck with it, but"},{"id":"segment-122","startMs":130640,"endMs":133350,"text":"forbid you're stuck with it, but\nPrismic, any of these situations, why"},{"id":"segment-123","startMs":133350,"endMs":133360,"text":"Prismic, any of these situations, why"},{"id":"segment-124","startMs":133360,"endMs":136229,"text":"Prismic, any of these situations, why\nwould you be choosing one of these over"},{"id":"segment-125","startMs":136229,"endMs":136239,"text":"would you be choosing one of these over"},{"id":"segment-126","startMs":136239,"endMs":137510,"text":"would you be choosing one of these over\nWordPress? Because WordPress does"},{"id":"segment-127","startMs":137510,"endMs":137520,"text":"WordPress? Because WordPress does"},{"id":"segment-128","startMs":137520,"endMs":140070,"text":"WordPress? Because WordPress does\neverything, right? Well, the reason why"},{"id":"segment-129","startMs":140070,"endMs":140080,"text":"everything, right? Well, the reason why"},{"id":"segment-130","startMs":140080,"endMs":142949,"text":"everything, right? Well, the reason why\nis because they have to manage the"},{"id":"segment-131","startMs":142949,"endMs":142959,"text":"is because they have to manage the"},{"id":"segment-132","startMs":142959,"endMs":145910,"text":"is because they have to manage the\nsecurity. So, for example, for Sanity,"},{"id":"segment-133","startMs":145910,"endMs":145920,"text":"security. So, for example, for Sanity,"},{"id":"segment-134","startMs":145920,"endMs":148390,"text":"security. So, for example, for Sanity,\nif Sanity was built in PHP, this is"},{"id":"segment-135","startMs":148390,"endMs":148400,"text":"if Sanity was built in PHP, this is"},{"id":"segment-136","startMs":148400,"endMs":150470,"text":"if Sanity was built in PHP, this is\nSanity's problem now, not your problem,"},{"id":"segment-137","startMs":150470,"endMs":150480,"text":"Sanity's problem now, not your problem,"},{"id":"segment-138","startMs":150480,"endMs":152550,"text":"Sanity's problem now, not your problem,\nbecause they have lots of enterprise"},{"id":"segment-139","startMs":152550,"endMs":152560,"text":"because they have lots of enterprise"},{"id":"segment-140","startMs":152560,"endMs":154229,"text":"because they have lots of enterprise\nclients and they need to make sure that"},{"id":"segment-141","startMs":154229,"endMs":154239,"text":"clients and they need to make sure that"},{"id":"segment-142","startMs":154239,"endMs":156550,"text":"clients and they need to make sure that\nthey don't tick those guys off that are"},{"id":"segment-143","startMs":156550,"endMs":156560,"text":"they don't tick those guys off that are"},{"id":"segment-144","startMs":156560,"endMs":157990,"text":"they don't tick those guys off that are\npaying hundreds of thousands, millions"},{"id":"segment-145","startMs":157990,"endMs":158000,"text":"paying hundreds of thousands, millions"},{"id":"segment-146","startMs":158000,"endMs":161350,"text":"paying hundreds of thousands, millions\nof dollars. Whereas, you have one IT"},{"id":"segment-147","startMs":161350,"endMs":161360,"text":"of dollars. Whereas, you have one IT"},{"id":"segment-148","startMs":161360,"endMs":163110,"text":"of dollars. Whereas, you have one IT\nteam that needs to sort this out. You"},{"id":"segment-149","startMs":163110,"endMs":163120,"text":"team that needs to sort this out. You"},{"id":"segment-150","startMs":163120,"endMs":164229,"text":"team that needs to sort this out. You\nmight not even be lucky enough to have"},{"id":"segment-151","startMs":164229,"endMs":164239,"text":"might not even be lucky enough to have"},{"id":"segment-152","startMs":164239,"endMs":166070,"text":"might not even be lucky enough to have\nan IT team. you've got Dave down the"},{"id":"segment-153","startMs":166070,"endMs":166080,"text":"an IT team. you've got Dave down the"},{"id":"segment-154","startMs":166080,"endMs":168790,"text":"an IT team. you've got Dave down the\nhallway that runs WordPress in your"},{"id":"segment-155","startMs":168790,"endMs":168800,"text":"hallway that runs WordPress in your"},{"id":"segment-156","startMs":168800,"endMs":170309,"text":"hallway that runs WordPress in your\nteam. So, you've got to be very careful"},{"id":"segment-157","startMs":170309,"endMs":170319,"text":"team. So, you've got to be very careful"},{"id":"segment-158","startMs":170319,"endMs":172470,"text":"team. So, you've got to be very careful\nbecause when a zero day like this"},{"id":"segment-159","startMs":172470,"endMs":172480,"text":"because when a zero day like this"},{"id":"segment-160","startMs":172480,"endMs":175190,"text":"because when a zero day like this\nhappens, that needs to get solved fast."},{"id":"segment-161","startMs":175190,"endMs":175200,"text":"happens, that needs to get solved fast."},{"id":"segment-162","startMs":175200,"endMs":177110,"text":"happens, that needs to get solved fast.\nAnd because there's a smaller surface"},{"id":"segment-163","startMs":177110,"endMs":177120,"text":"And because there's a smaller surface"},{"id":"segment-164","startMs":177120,"endMs":179830,"text":"And because there's a smaller surface\nfor headless, there's a lot less chance"},{"id":"segment-165","startMs":179830,"endMs":179840,"text":"for headless, there's a lot less chance"},{"id":"segment-166","startMs":179840,"endMs":181190,"text":"for headless, there's a lot less chance\nof getting hacked, having"},{"id":"segment-167","startMs":181190,"endMs":181200,"text":"of getting hacked, having"},{"id":"segment-168","startMs":181200,"endMs":183190,"text":"of getting hacked, having\nvulnerabilities happen that are as"},{"id":"segment-169","startMs":183190,"endMs":183200,"text":"vulnerabilities happen that are as"},{"id":"segment-170","startMs":183200,"endMs":184949,"text":"vulnerabilities happen that are as\ncatastrophic as what's just happened"},{"id":"segment-171","startMs":184949,"endMs":184959,"text":"catastrophic as what's just happened"},{"id":"segment-172","startMs":184959,"endMs":187190,"text":"catastrophic as what's just happened\nhere. Whereas the surface of WordPress"},{"id":"segment-173","startMs":187190,"endMs":187200,"text":"here. Whereas the surface of WordPress"},{"id":"segment-174","startMs":187200,"endMs":190070,"text":"here. Whereas the surface of WordPress\nis massive, and this vulnerability is"},{"id":"segment-175","startMs":190070,"endMs":190080,"text":"is massive, and this vulnerability is"},{"id":"segment-176","startMs":190080,"endMs":192550,"text":"is massive, and this vulnerability is\nreally, really bad. Those two things"},{"id":"segment-177","startMs":192550,"endMs":192560,"text":"really, really bad. Those two things"},{"id":"segment-178","startMs":192560,"endMs":194309,"text":"really, really bad. Those two things\nwork together to be completely"},{"id":"segment-179","startMs":194309,"endMs":194319,"text":"work together to be completely"},{"id":"segment-180","startMs":194319,"endMs":197430,"text":"work together to be completely\ncatastrophic. Now, if you're looking at"},{"id":"segment-181","startMs":197430,"endMs":197440,"text":"catastrophic. Now, if you're looking at"},{"id":"segment-182","startMs":197440,"endMs":199030,"text":"catastrophic. Now, if you're looking at\nmoving away from this and you're looking"},{"id":"segment-183","startMs":199030,"endMs":199040,"text":"moving away from this and you're looking"},{"id":"segment-184","startMs":199040,"endMs":201190,"text":"moving away from this and you're looking\nat trying to basically build your first"},{"id":"segment-185","startMs":201190,"endMs":201200,"text":"at trying to basically build your first"},{"id":"segment-186","startMs":201200,"endMs":203910,"text":"at trying to basically build your first\nwebsite that is headless, we actually"},{"id":"segment-187","startMs":203910,"endMs":203920,"text":"website that is headless, we actually"},{"id":"segment-188","startMs":203920,"endMs":206710,"text":"website that is headless, we actually\nhave a solution just for you. Let me"},{"id":"segment-189","startMs":206710,"endMs":206720,"text":"have a solution just for you. Let me"},{"id":"segment-190","startMs":206720,"endMs":208630,"text":"have a solution just for you. Let me\nshow you this. This is our own"},{"id":"segment-191","startMs":208630,"endMs":208640,"text":"show you this. This is our own"},{"id":"segment-192","startMs":208640,"endMs":210949,"text":"show you this. This is our own\nopen-source system called TurboArt"},{"id":"segment-193","startMs":210949,"endMs":210959,"text":"open-source system called TurboArt"},{"id":"segment-194","startMs":210959,"endMs":213509,"text":"open-source system called TurboArt\nSanity. And we basically released this"},{"id":"segment-195","startMs":213509,"endMs":213519,"text":"Sanity. And we basically released this"},{"id":"segment-196","startMs":213519,"endMs":215110,"text":"Sanity. And we basically released this\nin into the open. So, it's got all the"},{"id":"segment-197","startMs":215110,"endMs":215120,"text":"in into the open. So, it's got all the"},{"id":"segment-198","startMs":215120,"endMs":217270,"text":"in into the open. So, it's got all the\nbest licenses you could ask for. There's"},{"id":"segment-199","startMs":217270,"endMs":217280,"text":"best licenses you could ask for. There's"},{"id":"segment-200","startMs":217280,"endMs":218229,"text":"best licenses you could ask for. There's\nnothing that we're going to be like a"},{"id":"segment-201","startMs":218229,"endMs":218239,"text":"nothing that we're going to be like a"},{"id":"segment-202","startMs":218239,"endMs":220229,"text":"nothing that we're going to be like a\nclawback clause or any nastiness like"},{"id":"segment-203","startMs":220229,"endMs":220239,"text":"clawback clause or any nastiness like"},{"id":"segment-204","startMs":220239,"endMs":222869,"text":"clawback clause or any nastiness like\nthat. It's full MIT licensing. So you"},{"id":"segment-205","startMs":222869,"endMs":222879,"text":"that. It's full MIT licensing. So you"},{"id":"segment-206","startMs":222879,"endMs":224070,"text":"that. It's full MIT licensing. So you\ncan use this for your own business"},{"id":"segment-207","startMs":224070,"endMs":224080,"text":"can use this for your own business"},{"id":"segment-208","startMs":224080,"endMs":227910,"text":"can use this for your own business\ntoday. But this here is the best Nex.js,"},{"id":"segment-209","startMs":227910,"endMs":227920,"text":"today. But this here is the best Nex.js,"},{"id":"segment-210","startMs":227920,"endMs":230390,"text":"today. But this here is the best Nex.js,\nthe best sanity, and the best Versel in"},{"id":"segment-211","startMs":230390,"endMs":230400,"text":"the best sanity, and the best Versel in"},{"id":"segment-212","startMs":230400,"endMs":232070,"text":"the best sanity, and the best Versel in\nour opinion. So the Versell thing, you"},{"id":"segment-213","startMs":232070,"endMs":232080,"text":"our opinion. So the Versell thing, you"},{"id":"segment-214","startMs":232080,"endMs":233750,"text":"our opinion. So the Versell thing, you\ncan switch it out to AWS or you can"},{"id":"segment-215","startMs":233750,"endMs":233760,"text":"can switch it out to AWS or you can"},{"id":"segment-216","startMs":233760,"endMs":235430,"text":"can switch it out to AWS or you can\nswitch it out to Cloudflare, but why"},{"id":"segment-217","startMs":235430,"endMs":235440,"text":"switch it out to Cloudflare, but why"},{"id":"segment-218","startMs":235440,"endMs":237110,"text":"switch it out to Cloudflare, but why\nwould you want to do that? But this"},{"id":"segment-219","startMs":237110,"endMs":237120,"text":"would you want to do that? But this"},{"id":"segment-220","startMs":237120,"endMs":239030,"text":"would you want to do that? But this\nparticular system basically makes it"},{"id":"segment-221","startMs":239030,"endMs":239040,"text":"particular system basically makes it"},{"id":"segment-222","startMs":239040,"endMs":240710,"text":"particular system basically makes it\nvery easy for you to spin up and"},{"id":"segment-223","startMs":240710,"endMs":240720,"text":"very easy for you to spin up and"},{"id":"segment-224","startMs":240720,"endMs":243030,"text":"very easy for you to spin up and\nbasically vibe code your own website."},{"id":"segment-225","startMs":243030,"endMs":243040,"text":"basically vibe code your own website."},{"id":"segment-226","startMs":243040,"endMs":244710,"text":"basically vibe code your own website.\nObviously get us in towards the end and"},{"id":"segment-227","startMs":244710,"endMs":244720,"text":"Obviously get us in towards the end and"},{"id":"segment-228","startMs":244720,"endMs":246070,"text":"Obviously get us in towards the end and\nmake sure that you've got it set up"},{"id":"segment-229","startMs":246070,"endMs":246080,"text":"make sure that you've got it set up"},{"id":"segment-230","startMs":246080,"endMs":248070,"text":"make sure that you've got it set up\nproperly. But at the end of the day,"},{"id":"segment-231","startMs":248070,"endMs":248080,"text":"properly. But at the end of the day,"},{"id":"segment-232","startMs":248080,"endMs":249910,"text":"properly. But at the end of the day,\nthis is what I would recommend right now"},{"id":"segment-233","startMs":249910,"endMs":249920,"text":"this is what I would recommend right now"},{"id":"segment-234","startMs":249920,"endMs":252309,"text":"this is what I would recommend right now\nbecause the vulnerabilities shrink to an"},{"id":"segment-235","startMs":252309,"endMs":252319,"text":"because the vulnerabilities shrink to an"},{"id":"segment-236","startMs":252319,"endMs":255670,"text":"because the vulnerabilities shrink to an\nabsolute minute scale versus WordPress"},{"id":"segment-237","startMs":255670,"endMs":255680,"text":"absolute minute scale versus WordPress"},{"id":"segment-238","startMs":255680,"endMs":258789,"text":"absolute minute scale versus WordPress\nPHP Meltdown and it's extremely fast,"},{"id":"segment-239","startMs":258789,"endMs":258799,"text":"PHP Meltdown and it's extremely fast,"},{"id":"segment-240","startMs":258799,"endMs":260629,"text":"PHP Meltdown and it's extremely fast,\nextremely scalable, and then you can"},{"id":"segment-241","startMs":260629,"endMs":260639,"text":"extremely scalable, and then you can"},{"id":"segment-242","startMs":260639,"endMs":263909,"text":"extremely scalable, and then you can\nstart tacking on what you want as extra"},{"id":"segment-243","startMs":263909,"endMs":263919,"text":"start tacking on what you want as extra"},{"id":"segment-244","startMs":263919,"endMs":265990,"text":"start tacking on what you want as extra\nfeatures on the website. I hope this was"},{"id":"segment-245","startMs":265990,"endMs":266000,"text":"features on the website. I hope this was"},{"id":"segment-246","startMs":266000,"endMs":267510,"text":"features on the website. I hope this was\ninteresting. Tell me how you're getting"},{"id":"segment-247","startMs":267510,"endMs":267520,"text":"interesting. Tell me how you're getting"},{"id":"segment-248","startMs":267520,"endMs":268790,"text":"interesting. Tell me how you're getting\non at the minute. If anybody's having"},{"id":"segment-249","startMs":268790,"endMs":268800,"text":"on at the minute. If anybody's having"},{"id":"segment-250","startMs":268800,"endMs":270790,"text":"on at the minute. If anybody's having\nany issues with PHP or issues with"},{"id":"segment-251","startMs":270790,"endMs":270800,"text":"any issues with PHP or issues with"},{"id":"segment-252","startMs":270800,"endMs":272473,"text":"any issues with PHP or issues with\nhosting or all this kind of stuff,"},{"id":"segment-253","startMs":272473,"endMs":272483,"text":"hosting or all this kind of stuff,"},{"id":"segment-254","startMs":272483,"endMs":273990,"text":"hosting or all this kind of stuff,\n[music] drop us a message below. We'll"},{"id":"segment-255","startMs":273990,"endMs":274000,"text":"[music] drop us a message below. We'll"},{"id":"segment-256","startMs":274000,"endMs":276390,"text":"[music] drop us a message below. We'll\nsee if we can help you out. And I hope"},{"id":"segment-257","startMs":276390,"endMs":276400,"text":"see if we can help you out. And I hope"},{"id":"segment-258","startMs":276400,"endMs":279030,"text":"see if we can help you out. And I hope\nyou do well. So enjoy. [music]"},{"id":"segment-259","startMs":279030,"endMs":279040,"text":"you do well. So enjoy. [music]"},{"id":"segment-260","startMs":279040,"endMs":285573,"text":"you do well. So enjoy. [music]\nTake care. Bye-bye."}],"transcript":"Holy moly, what a day. So PHP has had a critical vulnerability. When you know it's a critical vulnerability is when the FBI gets involved. So if you don't know, basically you have to perform an immediate update, and it's recommended that if you can't perform an immediate update, you should probably take the entire website offline. If you want to know how bad this thing is, the CVSS scale is rated out of 10 and this is a 9.2. So it's pretty bad.\n\nSo what I want to talk to you about today is the reason why we build headless and why I would avoid a monolithic system like WordPress, which is PHP based, because of mainly this reason. If you don't know, WordPress has been around for a long, long period of time. I think it's coming up to either its 20th birthday or its 20th birthday's past, and it's been one of the most fundamental parts of blogging on the web for God knows how long. It makes up such a substantial amount of the internet.\n\nHowever, because it's monolithic, it has a lot of different systems that are involved in it. So you have the logins, you have the plugins, you have a whole host of different things. A lot of people keep their forms in there. They have user management where it's really quite extensive. All of that is handled in a monolithic system.\n\nOn the other hand, you have a headless system, and a headless system is usually a website. I'm going to say Next.js because that's the ones that we build, but you could have React Router, you could have Astro, any of these different frameworks. But basically that sits on a very, very narrow surface area versus WordPress, which is a huge surface area. And we'll come back to why that might be a problem in a second.\n\nSo in comparison, on headless you get to pick and choose whatever you want as a backend. You get to pick and choose whatever you want as a form or whatever else. All these different functionalities, user management, you can use things like Clerk. All of these things are pick and choose. You pick the best one in the industry and you essentially bolt it on.\n\nNow, why is this important when we say that we're going to use something like a microservice, like in the example of a CMS, like Sanity or Contentful or, God forbid you're stuck with it, Prismic? Any of these situations, why would you be choosing one of these over WordPress? Because WordPress does everything, right? Well, the reason why is because they have to manage the security. So for example, for Sanity, if Sanity was built in PHP, this is Sanity's problem now, not your problem, because they have lots of enterprise clients and they need to make sure that they don't tick those guys off that are paying hundreds of thousands, millions of dollars. Whereas you have one IT team that needs to sort this out. You might not even be lucky enough to have an IT team. You've got Dave down the hallway that runs WordPress in your team. So you've got to be very careful, because when a zero day like this happens, that needs to get solved fast.\n\nBecause there's a smaller surface for headless, there's a lot less chance of getting hacked, of having vulnerabilities happen that are as catastrophic as what's just happened here. Whereas the surface of WordPress is massive, and this vulnerability is really, really bad. Those two things work together to be completely catastrophic.\n\nNow, if you're looking at moving away from this and you're looking at trying to build your first website that is headless, we actually have a solution just for you. Let me show you this. This is our own open source system called Turbo Start Sanity, and we basically released this into the open. So it's got all the best licenses you could ask for. There's nothing like a clawback clause or any nastiness like that. It's full MIT licensing, so you can use this for your own business today. But this here is the best Next.js, the best Sanity and the best Vercel, in our opinion. The Vercel part, you can switch it out to AWS or you can switch it out to Cloudflare.\n\nThis particular system makes it very easy for you to spin up and basically vibe code your own website. Obviously, get us in towards the end and make sure that you've got it set up properly. But at the end of the day, this is what I would recommend right now, because the vulnerabilities shrink to an absolute minute scale versus the WordPress PHP meltdown. And it's extremely fast, extremely scalable, and then you can start tacking on what you want as extra features on the website.\n\nSo I hope this was interesting. Tell me how you're getting on at the minute. If anybody's having any issues with PHP or issues with hosting or all this kind of stuff, drop us a message below. We'll see if we can help you out. Take care. Bye bye.","transcriptOrigin":"Edited transcript from the original Roboto page","thumbnailUrl":"https://img.youtube.com/vi/cxACne9TxEM/maxresdefault.jpg","durationSeconds":295,"videoId":"cxACne9TxEM","publisherName":"Roboto Studio","faqs":[{"question":"How serious is the PHP vulnerability covered in the video?","answer":"It is rated 9.2 on the CVSS scale, which goes up to 10, so it is pretty bad. The advice is to update immediately, and if you can't update immediately, you should probably take the entire website offline. We cover this at 0:00 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"},{"question":"Is WordPress safe after PHP2Shell?","answer":"Our take is that we would avoid a monolithic, PHP-based system like WordPress, and this vulnerability is the main reason. WordPress has a huge surface area, and a zero day like this needs to be solved fast. In our view, a massive surface plus a vulnerability this bad is a catastrophic combination. We cover this at 0:29 and 2:49 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"},{"question":"Why do we call WordPress a monolith?","answer":"WordPress handles a lot of different systems in one place: logins, plugins, forms that a lot of people keep in there, and quite extensive user management. All of that runs inside one monolithic system, which is what gives it such a large surface area. We cover this at 0:58 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"},{"question":"What is a headless website and why is it more secure?","answer":"A headless system is usually a website built with a framework like Next.js, which is what we build, or React Router or Astro. It sits on a very narrow surface area compared to WordPress. Because the surface is smaller, there is a lot less chance of getting hacked or of a vulnerability as catastrophic as this one. We cover this at 1:17 and 2:55 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"},{"question":"Can I choose my own backend, forms and user management with headless?","answer":"Yes. With headless you pick whatever you want as a backend, whatever you want for forms, and a service like Clerk for user management. You pick the best option in the industry for each job and bolt it on. We cover this at 1:39 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"},{"question":"Why would a hosted CMS like Sanity be safer than WordPress?","answer":"With a CMS like Sanity or Contentful, the vendor has to manage the security, so a vulnerability is their problem, not yours. Sanity has enterprise clients paying hundreds of thousands to millions of dollars, so it has to keep them happy. With WordPress, the fix falls on your one IT team, or on whoever runs WordPress in your team if you don't have one. We cover this at 2:17 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"},{"question":"What is Turbo Start Sanity?","answer":"Turbo Start Sanity is our open source starter for building a headless website with Next.js, Sanity and Vercel. It is fully MIT licensed with no clawback clause, so you can use it for your own business, and you can swap Vercel for AWS or Cloudflare. It makes it easy to spin up and vibe code your own site, though we recommend getting us in towards the end to check it is set up properly. We cover this at 3:26 in the video.","sourceUrl":"https://robotostudio.com/videos/is-wordpress-safe-after-php2shell-our-take"}],"path":"/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take","indexable":false,"contentHash":"b756fb5362b125b36943a18916cb2fa2a0b2eb37825cc234b79c61fe7ef02416","representations":{"html":"https://bestsanityagency.com/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take","markdown":"https://bestsanityagency.com/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take.md","json":"https://bestsanityagency.com/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take.json"},"generation":"5e39adeb9fc695d06857c3e4","jsonLd":{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://robotostudio.com/#organization","name":"Roboto Studio","url":"https://robotostudio.com/","sameAs":["https://clutch.co/profile/roboto-studio","https://www.youtube.com/@robotostudio","https://x.com/studioroboto"]},{"@type":"Person","@id":"https://robotostudio.com/blog/author/jono#person","name":"Jono Alford","url":"https://robotostudio.com/blog/author/jono","sameAs":["https://dev.to/jonoroboto","https://x.com/jonoalford","https://www.reddit.com/user/jonoalford/"],"worksFor":{"@id":"https://robotostudio.com/#organization"}},{"@type":"Person","@id":"https://robotostudio.com/blog/author/sne#person","name":"Sne Tripathi","url":"https://robotostudio.com/blog/author/sne","sameAs":["https://x.com/sne_hil"],"worksFor":{"@id":"https://robotostudio.com/#organization"}},{"@type":"WebSite","@id":"https://bestsanityagency.com/#website","url":"https://bestsanityagency.com","name":"Roboto Studio evidence","publisher":{"@id":"https://robotostudio.com/#organization"}},{"@type":"WebPage","@id":"https://bestsanityagency.com/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take#page","url":"https://bestsanityagency.com/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take","name":"Is WordPress safe after PHP2Shell? Our take","publisher":{"@id":"https://robotostudio.com/#organization"},"mainEntity":{"@id":"https://www.youtube.com/watch?v=cxACne9TxEM"},"isPartOf":{"@id":"https://bestsanityagency.com/#website"}},{"@id":"https://www.youtube.com/watch?v=cxACne9TxEM","name":"Is WordPress safe after PHP2Shell? Our take","url":"https://www.youtube.com/watch?v=cxACne9TxEM","datePublished":"2026-10-23T00:00:00.000Z","inLanguage":"en","author":[],"@type":"VideoObject","description":"PHP2Shell is a critical PHP vulnerability rated 9.2 out of 10. Why we avoid monolithic WordPress, how a headless Next.js and Sanity stack keeps the surface area small, and the open source starter we use to spin one up.","transcript":"Holy moly, what a day. So PHP has had a critical vulnerability. When you know it's a critical vulnerability is when the FBI gets involved. So if you don't know, basically you have to perform an immediate update, and it's recommended that if you can't perform an immediate update, you should probably take the entire website offline. If you want to know how bad this thing is, the CVSS scale is rated out of 10 and this is a 9.2. So it's pretty bad.\n\nSo what I want to talk to you about today is the reason why we build headless and why I would avoid a monolithic system like WordPress, which is PHP based, because of mainly this reason. If you don't know, WordPress has been around for a long, long period of time. I think it's coming up to either its 20th birthday or its 20th birthday's past, and it's been one of the most fundamental parts of blogging on the web for God knows how long. It makes up such a substantial amount of the internet.\n\nHowever, because it's monolithic, it has a lot of different systems that are involved in it. So you have the logins, you have the plugins, you have a whole host of different things. A lot of people keep their forms in there. They have user management where it's really quite extensive. All of that is handled in a monolithic system.\n\nOn the other hand, you have a headless system, and a headless system is usually a website. I'm going to say Next.js because that's the ones that we build, but you could have React Router, you could have Astro, any of these different frameworks. But basically that sits on a very, very narrow surface area versus WordPress, which is a huge surface area. And we'll come back to why that might be a problem in a second.\n\nSo in comparison, on headless you get to pick and choose whatever you want as a backend. You get to pick and choose whatever you want as a form or whatever else. All these different functionalities, user management, you can use things like Clerk. All of these things are pick and choose. You pick the best one in the industry and you essentially bolt it on.\n\nNow, why is this important when we say that we're going to use something like a microservice, like in the example of a CMS, like Sanity or Contentful or, God forbid you're stuck with it, Prismic? Any of these situations, why would you be choosing one of these over WordPress? Because WordPress does everything, right? Well, the reason why is because they have to manage the security. So for example, for Sanity, if Sanity was built in PHP, this is Sanity's problem now, not your problem, because they have lots of enterprise clients and they need to make sure that they don't tick those guys off that are paying hundreds of thousands, millions of dollars. Whereas you have one IT team that needs to sort this out. You might not even be lucky enough to have an IT team. You've got Dave down the hallway that runs WordPress in your team. So you've got to be very careful, because when a zero day like this happens, that needs to get solved fast.\n\nBecause there's a smaller surface for headless, there's a lot less chance of getting hacked, of having vulnerabilities happen that are as catastrophic as what's just happened here. Whereas the surface of WordPress is massive, and this vulnerability is really, really bad. Those two things work together to be completely catastrophic.\n\nNow, if you're looking at moving away from this and you're looking at trying to build your first website that is headless, we actually have a solution just for you. Let me show you this. This is our own open source system called Turbo Start Sanity, and we basically released this into the open. So it's got all the best licenses you could ask for. There's nothing like a clawback clause or any nastiness like that. It's full MIT licensing, so you can use this for your own business today. But this here is the best Next.js, the best Sanity and the best Vercel, in our opinion. The Vercel part, you can switch it out to AWS or you can switch it out to Cloudflare.\n\nThis particular system makes it very easy for you to spin up and basically vibe code your own website. Obviously, get us in towards the end and make sure that you've got it set up properly. But at the end of the day, this is what I would recommend right now, because the vulnerabilities shrink to an absolute minute scale versus the WordPress PHP meltdown. And it's extremely fast, extremely scalable, and then you can start tacking on what you want as extra features on the website.\n\nSo I hope this was interesting. Tell me how you're getting on at the minute. If anybody's having any issues with PHP or issues with hosting or all this kind of stuff, drop us a message below. We'll see if we can help you out. Take care. Bye bye.","thumbnailUrl":"https://img.youtube.com/vi/cxACne9TxEM/maxresdefault.jpg","embedUrl":"https://www.youtube.com/embed/cxACne9TxEM","uploadDate":"2026-10-23T00:00:00.000Z","duration":"PT295S","publisher":{"@type":"Organization","name":"Roboto Studio"},"caption":{"@type":"MediaObject","contentUrl":"https://bestsanityagency.com/videos/cxACne9TxEM/is-wordpress-safe-after-php2shell-our-take.vtt","encodingFormat":"text/vtt"}}]}}