Going out soon This letter goes out on 11 October at 11:00 UTC. Subscribe below to get it in your inbox.

Founder notes, No. 01: a free WordPress vulnerability check, and an AI that can't approve itself

Mihai DragomirescuFounder, Respira for WordPress

RESPIRA.PRESS NO. 01 · 11 OCTOBER 2026
Founder notes
What I shipped and wrote this week, in one short letter.
A NOTE FROM MIHAI

Most of this week went into safety.

This is a new letter, and a short one. Each week, what I wrote and shipped for Respira, in one place, with a few lines from me on top.

On 22 September a flaw in WordPress core was used against sites within hours of its fix, and a WooCommerce plugin was still being attacked seven months after its own. Respira already checks your connected sites for known vulnerabilities from the inside. Now there is a free check anyone can run on any WordPress address, with no plugin and no login. If you look after sites for friends or clients, run it on theirs too.

The other half is a line I care about: the AI proposes, a person decides. Since plugin 9.1.26, an assistant connected to your site cannot open the settings that decide what it may do, and it cannot approve its own drafts. The story is below.
THIS WEEK ON THE BLOG 4 POSTS
Is your WordPress site vulnerable? Free check in 20 seconds. No plugin, no login.
WORDPRESS SECURITY · 6 MIN READ
Attackers reach WordPress sites within hours of a fix. Check yours in 20 seconds.
A core flaw used against sites within hours of its patch, a WooCommerce plugin attacked seven months after its fix. How attackers pick WordPress sites, and a free check for yours with no plugin and no login.
Read the article →
WordPress pages on a desk, joined by lines with check marks, inside a glass ring
THIS WEEK IN RESPIRA
Your AI can't approve its own work
Plugin 9.1.26 puts the settings that decide what an AI may do out of the AI's reach, 9.1.27 makes structure changes one restore away, and Respira now runs on the official WordPress MCP Adapter.
Three aluminium measuring instruments beside a printed page wireframe
MEASURED
Respira vs WPVibe, built and measured
The same HTML file and the same prompt on six WordPress builders: built by hand through WPVibe, by hand through Respira, and with Respira Exhale. Time, tool calls, cost, and how close each page came to the file.
A small robot plants a Respira flag on Mars and presses a green Grok key on a WordPress page
NEW AI · 4 MIN READ
Respira for WordPress welcomes Grok
Grok can now read and edit your WordPress site through Respira. On grok.com your site goes in as a custom connector with a sign-in, and in Grok Build it is one command.
ALSO SHIPPED THIS WEEK
· Inhale 0.7.0 and Respira ARC 0.4.0. Both free plugins on WordPress.org can now connect to a free respira.press account, which checks the whole WordPress site for known vulnerabilities every week.
· Respira is on DevHunt until Monday. If you use it, one honest sentence in the comments helps the next person decide.
Every post on the blog
Mihai Dragomirescu Mihai Dragomirescu
I build Respira for WordPress
Brașov, Romania
A seal with a human thumbprint: sent by a human, read by a human, Brașov A human on the other end
I use AI to help me write and check these emails, the same way you use it on your WordPress sites. When you reply, it is me who reads it and me who answers. Hit reply and tell me what you are building. I would love to see it.

Get the next letter

One letter when something worth reading has shipped, written by the person who built it. No schedule, no sequence, and one click to leave.

You are on the list. The next letter lands in your inbox.

Explore all Founder notes