Introducing EmDash, WordPress's spiritual successor that solves plugin security issues

Cloudflare has unveiled EmDash, a new CMS that completely reconstructs WordPress. The core goal is to solve plugin security, scalability, and modern web payment models all together.

EmDash is written entirely in TypeScript, and while it assumes a serverless architecture, it can also run on its own hardware or other platforms. It runs on top of Astro, and themes are composed of pages, layouts, components, styles, and seed files.

The biggest differentiator is the plugin architecture. Each plugin runs inside an isolated isolate on Dynamic Workers, and can only use the capabilities declared in its manifest.

• Plugins declare the permissions they need in advance.
• By default there is no external network access, and if needed, only specific hostnames can be allowed.
• Only permitted functions, such as sending email, are accessed through ctx.
• At install time, it's clear exactly what is being allowed, aiming for a much safer model than existing WordPress plugins.

This structure not only reduces security issues but also eases marketplace lock-in. Since plugins operate independently without sharing code, authors can freely choose their license, and site operators become less dependent on marketplace approval processes.

EmDash also supports x402 natively, enabling on-demand payments for content access. Operators only need to configure which content is paid, the price, and a wallet address, and clients such as AI agents can pay for access through the HTTP 402 Payment Required flow.

On the infrastructure side, EmDash leverages Cloudflare Workers and workerd's v8 isolate architecture, scaling only when there are requests and dropping to scale to zero when idle. Cloudflare aims to achieve both low cost and high scalability through this.

EmDash is open source under the MIT license and has been published on GitHub. Currently, the v0.1.0 preview can be deployed to a Cloudflare account or a Node.js server, and a demo playground is also available on the web.