The news comes after WordPress.com introduced Model Context Protocol support last year, which allowed AI agents to read your website's content, analytics and settings, but not modify your website.
Recent social engineering schemes involving WordPress and Microsoft’s Windows Terminal show that this relatively basic tactic is a growing threat.