WordPress sites face AI‑driven traffic loss and rising security threats

Content creators are grappling with a sharp decline in organic traffic as AI‑powered search results answer users’ questions without visiting webpages. Experts say sites must become trusted sources for large language models, adopting headless architectures, structured data and direct audience channels to remain relevant.

At the same time, WordPress installations are targeted by sophisticated cyber‑attacks. Recent incidents include a supply‑chain breach where attackers bought a plugin portfolio and inserted a backdoor that spreads through legitimate updates, and the multinational SocGholish operation coordinated by German, Dutch and U.S. police that compromised millions of sites to deliver malicious download prompts. Vulnerabilities in popular extensions such as Gravity SMTP further expose sites to data theft and API key exposure, highlighting the need for continuous security vigilance.