Ghost Plugins and the Rise of Terminal Agents

Nick d

So, Chris Morris published this massive study on WP Goldmine recently, auditing 57,383 plugins in the official directory. And, uh, the numbers are kind of wild. It turns out 24% of plugins in the 10K to 100K active install band haven't been updated in over two years.

Ben cohen

Wait, a full quarter of them? Almost one in four?

Nick d

Yeah, literally 1,209 popular plugins that have real, active user bases, sitting there with absolutely no maintainer.

Ben cohen

That is, um, I mean, that is a huge chunk of the web just running on complete autopilot. But wait, why aren't people replacing them? If a plugin hasn't been touched since 2024, why haven't site owners swapped it out?

Nick d

Because they just work! Look at the top ones on that abandoned list. You have things like Limit Login Attempts, Layout Grid Block, WP Downgrade. They do one tiny job. They don't break, they don't change their interface, and honestly, users love that zero UI churn.

Ben cohen

Right. They don't want a tool that redesigns its dashboard every six months or pushes, uh, upgraded pro popups into the admin bar every time you log in.

Nick d

it, it, it is the exact reason I ended up building wpfavs in the first place. You know, you try to build a clean stack for a client site, and you just want a simple micro utility to handle one basic task. But if you try to buy or install a modern active alternative today, it comes bundled with banner ads, upsell notices, heavy tracking, and three new top level admin menus you never asked for.

Ben cohen

Mm, totally. So site builders actively prefer a ghost plugin from 2022 that does two hundred lines of clean PHP over a brand new commercial plugin that treats your admin dashboard like a billboard.

Nick d

Exactly. But the risk, of course, is that eventually PHP versions tick up, or security vulnerabilities surface, and suddenly that forgotten utility becomes a liability.

Ben cohen

Well, that is where things get really interesting with what is launching right now in 2026. We are seeing this huge shift away from those big bloated admin plugins, toward tools that interface directly with native core APIs. Take something like Novamira CLI, or Benjamin Intal's new Ahentic AI workspace experiment.

Nick d

Wait, Ahentic? How does that one work again?

Ben cohen

So Ahentic connects directly to your site using native WordPress APIs. No external SaaS middleware, no heavy cloud servers, no complex custom MCP layer. It sits there, reads the site structure, helps you launch pages, and installs plugins through standard interfaces.

Nick d

Huh. And Novamira CLI lets you run terminal coding agents, right? Like Claude Code or Codex CLI or Gemini CLI, straight from your terminal into the site.

Ben cohen

Yes! You are running shell commands, querying the database, executing PHP, doing file operations, all driven by a local terminal agent. And think about what that does to traditional plugins. If an agent can execute maintenance, optimize tables, or rewrite options directly through core APIs, why do you need a massive heavy settings page inside wp admin at all?

Nick d

You don't! The whole UI layer becomes redundant. The terminal agent becomes your dashboard.

Ben cohen

Right, it is a fundamental threat to the classic plugin model. Software creators used to think they needed huge feature sets and elaborate dashboards to justify a subscription. But in this new environment, the winning products are going to be lightweight, audit ready micro utilities.

Nick d

Yeah, tools built to be monitored by automated scanners like Plugin Auditor, where the code is clean, transparent, and completely unobtrusive. You know, give me fifty lines of well structured PHP over a bloated plugin ecosystem any day of the week.

Ben cohen

It turns out the future of WordPress software looks a lot less like a giant software suite, and a lot more like simple, silent tools that just get out of the way.