What we fixed in the 1.7.0 correctness release
Version 1.7.0 closes an OAuth revocation race, stops a payment gateway credential leak, and fixes four ACF writes that were destroying content.
Read moreWhat we fixed in the 1.4.1 standards release
A user-reported OAuth bug and six related fixes bring error responses, discovery, and tool status codes in line with what MCP and OAuth clients expect.
Read moreQuick Connect: one-screen setup for a WordPress MCP server
Version 1.4.0 adds a one-screen Quick Connect wizard that gets an agent connected fast, without loosening the off by default governance underneath.
Read moreWhat we fixed in the 1.3.0 security release
In 1.3.0 we turned OAuth off by default and fixed real security gaps in our own plugin, patched in the open. Here is what changed.
Read moreOAuth or Application Password: how to connect an agent
Two honest ways to connect an AI agent to your WordPress site, what each one is good at, and how to pick the one that fits your setup.
Read more