Code and core Headless Fast API – Standalone, cacheable REST endpoints that skip the core load cycle
Audited at releasev1.0.0WordPress PluginAudited Today
Fast, cacheable headless API endpoints answered before the theme, the REST API and WP_Query load.
B
Total Findings
54
Security Grade
A
Security Findings
54Critical0
High1
Medium20
Low31
Info2
Executive Summary
Is Code and core Headless Fast API – Standalone, cacheable REST endpoints that skip the core load cycle secure? In WP HealthKit's independent 2026 audit, Code and core Headless Fast API – Standalone, cacheable REST endpoints that skip the core load cycle received an overall risk of HIGH and a report-card grade of B across 54 findings (0 critical, 1 high severity).
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).