Fix API URL Security & Risk Analysis

wordpress.org/plugins/fix-api-url

Uses site_url() instead of home_url() to build the API URL. Useful for having WordPress as a Headless CMS.

10 active installs v0.6 PHP + WP 5.0+ Updated Unknown
apiheadlesshome_urlreactivesite_url
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Fix API URL Safe to Use in 2026?

Generally Safe

Score 100/100

Fix API URL has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "fix-api-url" plugin version 0.6 exhibits an excellent security posture based on the provided static analysis. The complete absence of any identified attack surface, dangerous functions, SQL injection vulnerabilities, unescaped output, file operations, external HTTP requests, nonce checks, or capability checks is a significant strength. Furthermore, the lack of any recorded CVEs and the absence of taint analysis issues indicate a well-developed and secure codebase. This plugin appears to be designed with security as a top priority, adhering to best practices in WordPress development. While the lack of identified issues is highly positive, it's worth noting that a zero attack surface might suggest minimal functionality or that the plugin's purpose is extremely narrow. However, based solely on the provided data, the plugin presents a very low risk.

Vulnerabilities
None known

Fix API URL Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Fix API URL Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Fix API URL Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
filterrest_urlfix-api-url.php:41
filtermod_rewrite_rulesfix-api-url.php:42
filterpreview_post_linkfix-api-url.php:43
filteradmin_urlfix-api-url.php:47
filterincludes_urlfix-api-url.php:48
filtervhp_purgeme_pathfix-api-url.php:49
filtervhp_purge_urlsfix-api-url.php:50
filterdo_parse_requestfix-api-url.php:61
filterhome_urlfix-api-url.php:68
actioninitfix-api-url.php:78
Maintenance & Trust

Fix API URL Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedUnknown
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Fix API URL Developer Profile

Ederson Peka

6 plugins · 540 total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
742 days
View full developer profile
Detection Fingerprints

How We Detect Fix API URL

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

JS Globals
fix_api_url_parsing_request
REST Endpoints
/wp-json/
FAQ

Frequently Asked Questions about Fix API URL