
CORS Essentials
By :

WordPress can be self hosted, or you could use WordPress.com, which is the hosted/managed SaaS platform for creating WordPress sites. Although incoming and outgoing CORS requests are possible in the self-hosted WordPress, the WordPress.com platform only allows incoming requests.
WordPress.com provides a REST API, which can allow incoming CORS requests via JavaScript/jQuery only; other languages are not supported.
You need to whitelist the domains you want to allow to make requests to your application in the dashboard for the site. Authenticated and unauthenticated requests are supported.
The REST API provides a way for other domains to interact with the WordPress.com application. Requests are made to the URI , which is the API endpoint for WordPress.com. There is no provision for making a CORS request from WordPress.com to another domain. That is a limitation of using the WordPress.com SAAS compared with the self-hosted WordPress...
Change the font size
Change margin width
Change background colour