What this audit checks
Authentication & access
- Application password valid (auth on /wp-json/wp/v2/users/me)
- REST API reachable and not blocked by a security plugin / firewall
- User role can read drafts + moderate comments (else those cards degrade)
Publishing & content health
- No post published in 30 days (pipeline stalled)
- Publishing cadence dropped vs prior period
- Over 40% of posts not updated in 12 months (stale library)
- Drafts pending review piling up (>10)
- Posts missing featured image or excerpt (social / listing quality)
- Uncategorised posts > 0 (taxonomy hygiene)
Engagement & moderation
- Comment moderation backlog > 20 (held comments unanswered)
- Comment approval rate < 40% (spam flood or over-aggressive filter)
- Spam spike vs baseline (Akismet)
- High-traffic post with comments disabled (lost engagement)
Audience & traffic (Jetpack Stats)
- Site views dropped > 20% vs prior period
- Top-referrer source lost (lost backlink / partner)
- Zero-traffic published posts > 30% (dead weight / indexation issue)
Cross-channel: content-to-commerce (the killer area)
- High-traffic posts (analytics sibling) not updated in 12 months - SEO-decay risk on revenue pages
- Blog landing pages driving sessions but zero commerce conversions (CTA / merchandising gap)
- Top-converting content identified - double-down candidates (sibling analytics/commerce)
- Blog-attributed revenue trend down vs prior period
Data sources
GET {site_url}/wp-json/wp/v2/users/me- Auth + role/capability sanityGET {site_url}/wp-json/wp/v2/posts- Post inventory, status, dates, cadence, freshness, hygieneGET {site_url}/wp-json/wp/v2/comments- Comment counts + moderation/spam statusGET {site_url}/wp-json/wp/v2/categories- Taxonomy distribution + uncategorised detectionGET {site_url}/wp-json/jetpack/v4/stats-app- Views / visitors / top content (only when Jetpack Stats active)