rp-source-wordpress

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is fetched at runtime from the user-supplied WordPress base URL (public REST index + per-entity OPTIONS/GET responses), and scripts/wp-discovery.js parses response.text()/JSON and writes sample records/schemas into markdown that is then used as LLM context by later stages.