What 1.7.0 adds: Enable all writes, and a fuller audit log
Version 1.7.0 adds a one-click way to enable a section's ordinary writes, deliberately leaving deletes and high-risk abilities locked, plus a fuller audit log.
Read morePlain guides, governance notes, and honest use cases for running an AI agent against your own WordPress site.
Version 1.7.0 adds a one-click way to enable a section's ordinary writes, deliberately leaving deletes and high-risk abilities locked, plus a fuller audit log.
Read moreVersion 1.7.0 closes an OAuth revocation race, stops a payment gateway credential leak, and fixes four ACF writes that were destroying content.
Read moreIn 1.7.0 an agent asked to set an image's alt text hit a bare permission denied and had no way to know a different tool would have worked. Here is why, and what changed.
Read moreFive real risks of an AI agent on WordPress, deletion, data leakage, injected content, and credential exposure, mapped to the control that limits each one.
Read moreA hidden instruction in a comment can fool an AI agent on WordPress. What indirect prompt injection is, and how governance contains it when detection can't.
Read moreAn AI agent takes on whatever WordPress user connects it. Here is why Editor beats Administrator as that account, and how to scope the connection on purpose.
Read moreHow to list, audit, and retire WooCommerce coupons with an AI agent: reads first, approval before any write, and every coupon write locked behind a second gate.
Read moreThe WordPress MCP Adapter is the official building block for AI agents. Agent Abilities for MCP adds a governed catalog, admin UI, and audit log on top of it.
Read moreThree 1.6.2 fixes make the plugin's audit log worth trusting: it records the true cause of a block, covers every path that changes state, and stays readable.
Read more