WordPress is proposing built-in MCP and OAuth to let AI agents connect to sites. Some pieces already exist, but the simpler connection is only proposed for 7.3.
The question isn't how an agent logs in. It's how you find out what it changed when something breaks.
WordPress wasn't built for decentralized compute. It runs on it anyway.
With Acurast Cargo, you can deploy a full WordPress site: web server, PHP, database, persistent files, all on an Acurast processor.
No VPS, no cloud instance.
Read how:
Quiet Wordpress site? Don't rely on WP Cron for scheduled posts or backups. It only fires when someone loads a page.
In wp-config.php:
define('DISABLE_WP_CRON', true);
Then a real cron:
*/5 * * * * wp cron event run --due-now --path=/var/www/site
No visitors required.
Penetration Testing: WordPress Core flaw exploited by hackers in the wild, CISA confirms
The bug allows unauthenticated code execution during core upgrades. Wordfence blocked about 12,600 attacks in 24 hours and the federal patch deadline is 6 Nov
Moving a WordPress site? Don't run MySQL REPLACE() on the old URL.
Some settings are stored as serialised PHP, with string lengths baked in. Change the URL without updating those lengths and things break.
Use wp search-replace instead. Back up first and try --dry-run.