It looks that wordpress has big problems with his possibility to upload files, and also to publish comments. But this opens many possibilities malware to be uploaded to such sites, and then they will be easily hacked.
I'm using following configuration for caddy web server configuration:
..... {
encode zstd