It stores plugins as strings in the database, then pulls those strings back and evals them as PHP on requests.
"Better coded" is very much a subjective assessment.
"Better coded" is very much a subjective assessment.
I really appreciate your work and even more that you took time and risk exposing your findings, I wish more people did this.