> Executable PHP in the Database, as a single example... Do you have a specific example of this? WP itself doesn't use executable PHP in the database, although

> Executable PHP in the Database, as a single example... Do you have a specific example of this? WP itself doesn't use executable PHP in the database, although there are plugins that do (and are hence heavily discouraged). (You _could_ be referencing storing complex values as serialized data for options/meta, which can technically give you some sorts of executable capabilities: https://www.owasp.org/index.php/PHP_Object_Injection https://www.owasp.org/index.php/PHP_Object_Injection )