How many vulnerabilities does StaticQ Headless have?

The audit found 203 findings: 5 critical, 5 high, 103 medium severity.

Should I use StaticQ Headless?

Based on the latest audit (grade D, risk CRITICAL), review the 203 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

StaticQ Headless

Q: Is StaticQ Headless secure?

WP HealthKit's independent audit rates StaticQ Headless overall risk as CRITICAL with a report-card grade of D.

Audited at release

v1.0.0WordPress PluginAudited 8 days ago

Headless WordPress on a Cloudflare + Astro frontend, with automatic per-URL cache updates on every edit. No rebuilds, no manual purges.

CRITICAL

Total Findings

203

Security Grade

Security Findings

203

Critical5

High5

Medium103

Low86

Info4

Executive Summary

Is StaticQ Headless secure? In WP HealthKit's independent 2026 audit, StaticQ Headless received an overall risk of CRITICAL and a report-card grade of D across 203 findings (5 critical, 5 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.5Declared minimum: 8.1Mismatch detected

Categories with Findings

SecurityPHP CompatibilityPerformancePlugin LifecycleCoding StandardsType SafetyInternationalizationUpdate SafetyPlugin ConflictscompatibilityWordPress CompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![StaticQ Headless security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/staticq-headless)](https://wphealthkit.com/directory/staticq-headless)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.5Declared minimum: 8.1Mismatch detected

Categories with Findings

SecurityPHP CompatibilityPerformancePlugin LifecycleCoding StandardsType SafetyInternationalizationUpdate SafetyPlugin ConflictscompatibilityWordPress CompatibilityDependencies

StaticQ Headless

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings