Analyze WordPress fleet risk API
Summarize version-age warnings and caller-supplied vulnerability matches across the inventory. Version age is not treated as a confirmed vulnerability.
The Analyze WordPress fleet risk operation is part of the WordPress Fleet Intelligence API on BRAINIAC.software. Summarize version-age warnings and caller-supplied vulnerability matches across the inventory. Version age is not treated as a confirmed vulnerability. It is exposed as POST /api/v1/wordpress-fleet/risk-analyze and priced at $0.05 USDC on Base. Payment uses the x402 exact scheme: an unpaid call returns HTTP 402 with payment requirements; after paying the exact USDC amount, retry the same request with a payment-signature header and Idempotency-Key. No account and no API key are required. Data sources for this product: Caller-supplied site inventories WordPress.org public plugin and theme metadata Limitations: Inventories are copied only from labeled fields in the request. Public release data comes from the caller or WordPress.org metadata. An older version is a version-age warning, not a confirmed vulnerability. An update is never marked safe from metadata alone. No WordPress site is logged into or modified. Outputs are compliance prechecks, drafts, or data lookups for human review. They are not official determinations, legal advice, identity confirmation, or certified filings. Related operations in this group include Normalize a WordPress site inventory, Audit WordPress plugin versions, Audit WordPress theme versions, Check update compatibility metadata. Open the group documentation for the full request schema, field notes, and response examples before integrating.
/api/v1/wordpress-fleet/risk-analyzeExample request
curl -i -X POST "https://www.brainiac.software/api/v1/wordpress-fleet/risk-analyze" \
-H 'content-type: application/json' \
-H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
--data-binary @- <<'JSON'
{
"sites": [
{
"id": "S-1",
"wordpress": "6.0",
"php": "7.0"
}
],
"plugins": [
{
"siteId": "S-1",
"slug": "akismet",
"version": "5.0.0",
"active": true
}
],
"themes": [
{
"siteId": "S-1",
"slug": "twentytwentyfour",
"version": "1.0",
"active": true
}
],
"publicCatalog": [
{
"kind": "plugin",
"slug": "akismet",
"version": "5.7.2",
"requires": "5.8",
"tested": "6.7",
"requiresPhp": "7.2"
},
{
"kind": "theme",
"slug": "twentytwentyfour",
"version": "1.3",
"requires": "6.4",
"requiresPhp": "7.0"
}
],
"vulnerabilities": [
{
"kind": "plugin",
"slug": "akismet",
"fixedIn": "5.1.0",
"cve": "CVE-EXAMPLE-1"
}
]
}
JSONAn unpaid probe returns HTTP 402 with x402 payment requirements. After paying the exact USDC amount on Base, retry the identical request with a payment-signature header.
FAQ
- Do I need an API key? No. Pay the listed USDC amount with x402.
- What network? Base (eip155:8453), USDC.
- Is this an official determination? No. Results are for human review against the cited sources.
Related operations
- Normalize a WordPress site inventory — $0.04 USDC
- Audit WordPress plugin versions — $0.05 USDC
- Audit WordPress theme versions — $0.05 USDC
- Check update compatibility metadata — $0.05 USDC