Latest / Wpfavs - Your favourite WordPress news / WordPress’s AI Era: New Agents, Bigger Security Risks

Transcript

WordPress’s AI Era: New Agents, Bigger Security Risks · Wpfavs - Your favourite WordPress news

• 0:13
  Here's the question for today: is WordPress formally entering its AI era?
• 0:18
  Not the era of bolting a chatbot onto a plugin.
• 0:21
  I mean AI in the foundation.
• 0:23
  And one number made me sit up.
• 0:25
  Roughly 30 percent of active WordPress sites now run at least one AI powered plugin.
• 0:30
  Two years ago that was under 8 percent.
• 0:33
  That's a steep climb, and it's a good start, but the bigger story is what happened
• 0:37
  in core.
• 0:38
  WordPress 7.0, Armstrong, shipped in May with the Abilities API,
• 0:43
  an AI Services Registry, a WordPress AI Client, and the AI Connectors screen.
• 0:49
  It had over 4.6 million downloads and 875 plus contributors.
• 0:54
  So when it comes to building on AI, the plumbing now lives in WordPress itself.
• 0:58
  And that plumbing matters more than any single feature.
• 1:01
  Think about the old way.
• 1:02
  Every plugin builds its own AI box, its own settings, its own keys.
• 1:07
  With the Abilities API, a plugin declares what it can do, and an agent can query
• 1:11
  that registry and run those tasks.
• 1:14
  WordPress 7.1 was timed for August 19, alongside WordCamp US in Phoenix.
• 1:20
  By September, major plugins were connecting to assistants like Claude and ChatGPT in
• 1:25
  a serious way.
• 1:26
  That's the moment AI stopped being an add on and started being an expectation.
• 1:30
  There's a pressure behind this, too.
• 1:33
  WordPress is still around 42 percent of all websites, and close to 60 percent of
• 1:38
  sites with a detectable CMS.
• 1:41
  But it slipped from a mid 2025 peak near 43.6 percent to about 41.9.
• 1:48
  Wix grew over 30 percent year over year to 4.3 percent CMS share,
• 1:53
  and standalone AI site generators arrived.
• 1:57
  The ecosystem is still valued around 596.7 billion dollars,
• 2:01
  but nobody gets to stand still.
• 2:03
  My read, and that's interpretation, not data, is that AI in core is partly a
• 2:09
  response to that.
• 2:10
  If someone can describe a site to a generator in one prompt,
• 2:14
  WordPress needs to meet them with something just as fast, plus the control WordPress
• 2:18
  is known for.
• 2:19
  What fascinates me is that two very different interfaces are emerging.
• 2:24
  The first is dashboard native, with zero middleware.
• 2:27
  Benjamin Intal, founder of Stackable and WP Interactions, previewed Ahentic AI.
• 2:33
  It understands the whole site, helps launch it, and installs plugins,
• 2:37
  with no external servers, no outside services, no MCP, just WordPress and its new
• 2:43
  APIs.
• 2:44
  WPadmin.AI takes a similar route, handling bulk edits, migrations,
• 2:49
  and troubleshooting inside the dashboard.
• 2:51
  The second path goes the other direction, into the terminal.
• 2:55
  Novamira CLI connects coding agents like Claude Code, Codex CLI,
• 3:00
  and Gemini CLI straight to a WordPress site, with PHP execution,
• 3:04
  database queries, and file operations.
• 3:07
  And Elementor's Angie added Super Admin Mode, which can read and write the file
• 3:12
  system, query the database, execute PHP, and do what used to need WP CLI or server
• 3:19
  access.
• 3:20
  The agent isn't clicking around the interface anymore.
• 3:23
  It's working underneath it.
• 3:24
  And the unglamorous updates are what make it usable.
• 3:28
  Novamira 1.5.0 added native Gutenberg support, so agents can create and edit posts
• 3:33
  with core and third party blocks, valid from the first save.
• 3:37
  No more broken block recovery prompts.
• 3:40
  Novamira Pro 1.1.0 added abilities for ACF, JetEngine, Meta Box,
• 3:45
  Pods, and more.
• 3:47
  That's the kind of detail that turns a demo into a workflow.
• 3:50
  But we have to talk about the cost, because the speed here has a dark side.
• 3:53
  Patchstack's State of WordPress Security 2026 recorded 11,334 new vulnerabilities in
• 4:00
  2025, up 42 percent year over year.
• 4:04
  Highly exploitable ones jumped 113 percent.
• 4:07
  And Patchstack specifically called out vibe coding, where developers ship plugin
• 4:12
  code an LLM wrote and they can't audit.
• 4:14
  When the person shipping can't review it, flaws go live silently.
• 4:19
  The timing is the scary part.
• 4:21
  Patchstack says the weighted median time from public disclosure to mass exploitation
• 4:25
  was five hours.
• 4:27
  And 46 percent of disclosed vulnerabilities had no patch at disclosure,
• 4:31
  because 52 percent of plugin developers hadn't patched before it went public.
• 4:36
  So the advice to just keep plugins updated doesn't cover you when there's no update
• 4:40
  yet.
• 4:40
  And hosting doesn't save you either.
• 4:42
  According to that same data, 87.8 percent of WordPress specific exploits bypass
• 4:47
  standard hosting firewalls, which block only about 26 percent.
• 4:52
  Network firewalls can't read what a plugin flaw means.
• 4:55
  GuardingWP's report adds that 52.8 percent of sites run at least one plugin with a
• 5:01
  known vulnerability, 55.9 percent leak their WordPress version,
• 5:05
  and 93.2 percent miss modern security headers.
• 5:09
  Now put that next to an agent with file system and database access.
• 5:13
  That's my interpretation, but it makes permissions the whole conversation.
• 5:16
  The same power that makes Angie or Novamira useful is exactly what you'd worry about
• 5:21
  if something goes wrong.
• 5:22
  So here's the practical part for developers.
• 5:25
  First, learn to define schemas and abilities cleanly, because that's how agents will
• 5:30
  see your plugin.
• 5:31
  Second, learn granular agent permissions and keep a human in the loop for anything
• 5:36
  that writes.
• 5:37
  Third, add application layer virtual patching, since your host probably won't catch
• 5:42
  it.
• 5:42
  And fourth, review every piece of AI generated code before it ships.
• 5:47
  As you embark on this journey, treat auditing as a core skill,
• 5:51
  not an afterthought.
• 5:52
  There's a business shift, too.
• 5:53
  Envato moved to a flat 50 percent author fee, and developers like Vova and Xaver are
• 5:59
  saying going independent is inevitable.
• 6:01
  Meanwhile GoDaddy launched Airo for WordPress in general availability,
• 6:06
  Vercel released an AI Gateway plugin with 40 plus providers behind one key,
• 6:10
  and Jetpack added AI Answers with cited summaries.
• 6:13
  AI is landing at the hosting, marketplace, and search layers all at once.
• 6:17
  So is this the AI era?
• 6:18
  I think yes.
• 6:20
  The foundation is in core, plugins are connecting, and agents are choosing between
• 6:24
  dashboard and terminal.
• 6:26
  Industry projections say over 40 percent of sites will run an AI plugin by late
• 6:31
  2026, and more than 50 percent by 2027.
• 6:35
  But those are projections.
• 6:36
  What's already real is the question that matters most: who holds the keys,
• 6:40
  and who checks the work?