Issues

• [Security] Sandbox directory is web-accessible: .php files written there are directly executable over HTTP with no auth (CWE-552)

  soflyy/agent-connector-for-wp#137 · Filter by author literary-echoes opened on Oct 11, 2026

• OAuth sign-in breaks on plain permalinks when you're not logged in

  soflyy/agent-connector-for-wp#136 · Filter by author juanlistab opened on Oct 9, 2026

• .mcpb fails on self-signed certs

  soflyy/agent-connector-for-wp#135 · Filter by author juanlistab opened on Oct 9, 2026

• Only show the MCP URL in the step that needs it

  soflyy/agent-connector-for-wp#134 · Filter by author juanlistab opened on Oct 9, 2026

• ChatGPT never asks you to sign in after installing the plugin

  soflyy/agent-connector-for-wp#133 · Filter by author juanlistab opened on Oct 9, 2026
  1

• Don't offer Claude Desktop OAuth on sites Anthropic can't reach

  soflyy/agent-connector-for-wp#132 · Filter by author juanlistab opened on Oct 9, 2026

• Keep MCP names short

  soflyy/agent-connector-for-wp#129 · Filter by author louisreingold opened on Oct 6, 2026

• insert-stylesheet: a breakpoint override of one border sub-property blanks the other two — border-width inside @media silently drops the base style and color

  soflyy/agent-connector-for-wp#106 · Filter by author JoeDostie opened on Aug 30, 2026
  2

• insert-stylesheet: justify-content / align-items are silently dropped when the same rule sets a non-flex display

  soflyy/agent-connector-for-wp#105 · Filter by author JoeDostie opened on Aug 30, 2026
  2

• App Passwords not available error states lack of HTTPS as reason, but there may be other reasons

  soflyy/agent-connector-for-wp#100 · Filter by author louisreingold opened on Aug 26, 2026

• Ability descriptions don't warn agents that WP content filters mangle inline <script> (breaks && and other bare entities)

  soflyy/agent-connector-for-wp#97 · Filter by author a-dubiel opened on Aug 19, 2026
  2

• Hostinger "Hostinger Tools" plugin prevents you from generating an application password

  soflyy/agent-connector-for-wp#96 · Filter by author KittenCodes opened on Aug 19, 2026

• custom-php template rule can never be set via REST: oneOf on the rule value rejects every non-numeric string

  soflyy/agent-connector-for-wp#93 · Filter by author JoeDostie opened on Aug 15, 2026

• PHP 8.3+ Deprecation Spam: Static access on McpObservabilityHelperTrait

  soflyy/agent-connector-for-wp#91 · Filter by author prabch opened on Aug 14, 2026

• Document reverse proxy authentication requirements and improve OAuth discovery errors

  soflyy/agent-connector-for-wp#90 · Filter by author prabch opened on Aug 11, 2026

• Add a css-resolve ability — agents can verify CSS is present but not that it wins

  soflyy/agent-connector-for-wp#89 · Filter by author a-dubiel opened on Aug 6, 2026

• php-eval fatal errors return two concatenated JSON objects, so the response body is not parseable

  soflyy/agent-connector-for-wp#88 · Filter by author a-dubiel opened on Aug 6, 2026
  1

• Add a global-styles-set ability — raw php-eval makes agents rediscover WordPress write conventions

  soflyy/agent-connector-for-wp#87 · Filter by author a-dubiel opened on Aug 6, 2026

• Agent has no signal to author block markup — picks shortcodes, output mismatches block-rendered store pages

  soflyy/agent-connector-for-wp#86 · Filter by author a-dubiel opened on Aug 6, 2026
  2

• edit-post cannot write a dynamic-data binding to a repeater property — schema says array, storage format is a shortcode string (Gallery ← ACF gallery field)

  soflyy/agent-connector-for-wp#85 · Filter by author JoeDostie opened on Aug 5, 2026
  1

• wp-cli ability always fails on Windows: resolve_binary() is POSIX-only (also nulls every env-inspect tool probe)

  soflyy/agent-connector-for-wp#84 · Filter by author FoxCreate opened on Aug 5, 2026

• MCP schema rejects media.attributes required for responsive srcset/sizes on Fundamental Image / Image

  soflyy/agent-connector-for-wp#82 · Filter by author TTvede opened on Jul 28, 2026
  4

• Optional arguments break get-element-slugs, get-instructions, get-post-tree — "Cannot use object of type stdClass as array"

  soflyy/agent-connector-for-wp#81 · Filter by author JoeDostie opened on Jul 26, 2026
  1

• insert-stylesheet drops background-image declarations and lowercases custom property names

  soflyy/agent-connector-for-wp#80 · Filter by author JoeDostie opened on Jul 26, 2026
  3

• Image element: content.image.size renders the placeholder for media-library images — media.sizes is unwritable through the MCP schema

  soflyy/agent-connector-for-wp#79 · Filter by author JoeDostie opened on Jul 26, 2026
  4