NovaCraft API Builder

Audited at release

v1.0.0WordPress PluginAudited Today

The free, WordPress.org-compatible REST API foundation for headless WooCommerce stores — JWT authentication, API keys, caching, and a React admin UI.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical20

High20

Medium34

Low16

Info1

Executive Summary

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Categories with Findings

Dependency SecuritySecurityHardcoded SecretsPerformanceDatabasePlugin LifecycleTheme StandardsType SafetyWordPress CompatibilityWooCommerce CompatibilityHook WiringInternationalization

Plugin Info

Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![NovaCraft API Builder security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/novacraft-api-builder)](https://wphealthkit.com/directory/novacraft-api-builder)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update? See the update-safety verdict for NovaCraft API Builder

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Categories with Findings

Dependency SecuritySecurityHardcoded SecretsPerformanceDatabasePlugin LifecycleTheme StandardsType SafetyWordPress CompatibilityWooCommerce CompatibilityHook WiringInternationalization