Four-year-old comment security bug affects 86 percent of WordPress sites (Ars Technica)

> You should be able to perform admin task without a web browser.

Ok, so you are saying that the wordpress users need to be taught how to ssh into a server to make changes to their config.

Can you see how this could be a problem for windows users?

Can you see how allowing $randon_internet_user shell access on a shared server would be even more dangerous than them using a browser to administer their site?