Beginner
The WordPress MCP Adapter is now official
The adapter that lets AI assistants read and act on a WordPress site is now a WordPress.org plugin, which means it is about to be everywhere. Themeisle explains what it exposes, who can use it, and how to keep its reach narrow instead of wide open.
Why AI agents need guardrails, not a master key
An AI agent with unlimited access can do in one step what a careless person rarely would, like deleting a production database and its backups. Kinsta walks through the limits worth setting before you hand an agent the keys to a live site.
Yoast SEO or All in One SEO?
Your SEO plugin shapes how both search engines and AI models read every page you publish, so the choice matters more than it used to. Yoast lays the two heavyweights side by side, with the obvious caveat that they wrote it.
Developer
WordPress 7.1.3 patches seven security holes
The 7.1.3 maintenance release fixes seven security issues and four bugs, landing two weeks after 7.1.2 closed an unauthenticated local file inclusion flaw. Patchstack's rundown is the fast way to gauge how urgent this one is for your sites.
An XSS campaign that hides its own admin account
Attackers are exploiting stored XSS in two unrelated plugins with a single payload that creates a hidden administrator for later. Worth reading to understand how a modern compromise survives long after the original bug is patched.
Bricksforge flaw is under active attack
A critical unauthenticated file upload in Bricksforge is being exploited in the wild, and Patchstack has a mitigation rule up for its customers. Anyone running Bricksforge should update right away and scan for files they did not put there.
A practical guide to naming things
Naming is the small, recurring tax on every component and variable you write, and this collects conventions and structures that make it less painful. A welcome break from the security news, and something you will use the next time you stare at an empty file.
Business
The real cost of letting AI run your systems
The WP Minute digs into a question every agency is about to face: which work should stay with humans once AI can run the systems around it. A grounded take on where automation pays off and where it costs you more than it saves.
The SEO tools your AI assistant can drive
Themeisle compares nine SEO MCP servers, from Ahrefs to Search Console, covering what each one reads, how you sign in, and what the calls cost. Useful if you want your assistant pulling real search data instead of guessing.
One login for the whole team, finally
Plenty of agencies still share a single hosting login across twenty or thirty people, which is a security incident waiting to happen. Pressable's new single sign-on ties access to your identity provider so you can see and control who gets in.
Non-WordPress
FBI makes arrests in the ShinyHunters case
The FBI arrested the co-founder of a Canadian security firm tied to ShinyHunters, the group that recently stole sensitive data on thousands of its own agents. A tangled, fast-moving story about how blurred the line between defender and attacker has become.
Deno is joining Cloudflare
The Deno team is moving to Cloudflare to make self-hosting Workers and Durable Objects far simpler. If you build on either runtime, it is a clear signal of where the edge world is consolidating.
The internet's DNS keys just rolled over
On October 11 the DNS root switched to a new key-signing key, a rare event that can break name resolution for anyone whose resolver was not ready. Cloudflare explains how to confirm yours came through it cleanly.