{"summary":{"analyzed":true,"build_worthy":false,"build_worthy_family_key":"migration-recovery","build_worthy_family_name":"migration and recovery assurance","build_worthy_reason":"This row is supporting evidence for the linked opportunity family; use the family card, not this row, for the build decision.","build_worthy_scope":"opportunity_family","comments_returned":0,"commercial_card_missing_count":0,"commercial_card_status":"complete","commercial_context_status":"linked_opportunity","commercial_context_status_label":"Evidence linked to opportunity","evidence_context_status":"linked_opportunity","evidence_context_status_label":"Evidence linked to opportunity","evidence_role":"supports_opportunity_family","evidence_role_label":"Evidence supporting opportunity family","evidence_role_reason":"This row is supporting evidence for the linked opportunity family; use the family card, not this row, for the build decision.","intelligence_role":"supporting_evidence","intelligence_role_label":"Supporting evidence","is_build_worthy":false,"opportunity_context_status":"linked_opportunity","opportunity_context_status_label":"Evidence linked to opportunity","opportunity_decision_status":"supporting_evidence","opportunity_decision_status_label":"Supporting evidence","opportunity_relevance":0.9,"plugin_name":"Simple Content Templates for Blog Posts & Pages","promotion_reason":"This row is supporting evidence linked to a commercial opportunity family, not the build-worthy opportunity itself.","promotion_status":"linked_opportunity","promotion_status_label":"Evidence linked to opportunity","recommendation_role":"evidence_input","recommendation_role_label":"Evidence input","reply_count":0,"row_is_build_worthy":false,"row_is_opportunity":false,"row_role":"supporting_evidence","row_role_label":"Supporting evidence","sentiment":"complaint","severity":"high","slug":"simple-post-template","source":"review","source_link_count":2,"url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","worth_validating":false,"source_count":0,"source_evidence_summary":{"total":26,"source_evidence_rows":4,"source_link_rows":4,"source_count_only_rows":0,"missing_source_evidence_rows":22,"source_evidence_not_applicable_rows":0,"source_link_coverage_percent":15.4,"evidence_required_rows":0,"evidence_required_rows_missing_source_links":0,"build_worthy_rows_missing_source_links":0,"decision_rows_missing_source_links":0,"missing_source_examples":[]},"commercial_readiness":{"total":26,"validation_ready":0,"core_validation_ready_rows":0,"family_wide_validation_ready_rows":0,"core_only_validation_ready_rows":0,"validation_scope_status":"not_ready","validation_scope_label":"Not ready","validation_scope_warning":"","validation_scope_counts":[{"scope":"not_validation_ready","label":"Not validation-ready","count":26}],"blocker_count":50,"caution_count":0,"status_counts":[{"status":"needs_external_proof","label":"Needs outside proof","count":25},{"status":"needs_family_proof","label":"Needs family proof","count":1}],"blocker_counts":[{"label":"Outside proof needed: not validated","count":25},{"label":"Commercial gate not complete: proof blocked","count":25}],"caution_counts":[],"ready_for_buyer_validation":0,"needs_external_proof":25,"needs_family_proof":1,"needs_report":0,"needs_thesis_detail":0,"needs_thesis_sharpening":0,"research_first":0,"research_only":0,"hold":0,"unclassified":0,"core_wedge_validation_ready_rows":0,"full_family_validation_ready_rows":0,"scope_limited_validation_rows":0,"full_family_claim_ready_rows":0,"validation_claim_scope_policy":"Core-only validation rows are worth buyer testing, but they must not be presented as full-family commercial opportunities until family_wide_validation_ready is true."},"commercial_readiness_summary":{"status":"needs_family_proof","label":"Needs family proof","validation_ready":false,"family_key":"migration-recovery","family_name":"migration and recovery assurance","decision_bucket":"proof_blocked","decision_bucket_label":"Proof Blocked","proof_status":"validated_core","proof_status_label":"Validated core","commercial_gate_status":"complete","commercial_gate_label":"Gate complete","commercial_gate_passed":7,"commercial_gate_total":7,"commercial_card_status":"complete","commercial_card_complete":true,"commercial_card_missing_count":0,"blockers":[],"blocker_count":0,"cautions":[],"caution_count":0,"next_action":"Finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","dossier_url":"/opportunities/families/migration-recovery/dossier","dossier_api_url":"/api/opportunities/families/migration-recovery/dossier"},"readiness_summary":{"status":"needs_family_proof","label":"Needs family proof","validation_ready":false,"family_key":"migration-recovery","family_name":"migration and recovery assurance","decision_bucket":"proof_blocked","decision_bucket_label":"Proof Blocked","proof_status":"validated_core","proof_status_label":"Validated core","commercial_gate_status":"complete","commercial_gate_label":"Gate complete","commercial_gate_passed":7,"commercial_gate_total":7,"commercial_card_status":"complete","commercial_card_complete":true,"commercial_card_missing_count":0,"blockers":[],"blocker_count":0,"cautions":[],"caution_count":0,"next_action":"Finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","dossier_url":"/opportunities/families/migration-recovery/dossier","dossier_api_url":"/api/opportunities/families/migration-recovery/dossier"},"cache_source":"durable_stale","cache_age_seconds":11150,"payload_mode":"compact","full_payload_url":"/api/evidence/source?full=true&compact_schema=evidence-source-v2&url=https%3A//wordpress.org/support/topic/medium-level-vulnerability-not-addressed/&comment_limit=80&text_limit=12000","row_key":"rows","source_row_key":"rows","rows_shown":1,"comments_shown":0,"evidence_summary":{"total":1,"source_evidence_rows":0,"source_link_rows":1,"source_count_only_rows":0,"missing_source_evidence_rows":0,"source_evidence_not_applicable_rows":0,"source_link_coverage_percent":100.0,"evidence_required_rows":0,"evidence_required_rows_missing_source_links":0,"build_worthy_rows_missing_source_links":0,"decision_rows_missing_source_links":0,"missing_source_examples":[]}},"rows":[{"section":"source","row_type":"source","url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","slug":"simple-post-template","plugin_name":"Simple Content Templates for Blog Posts & Pages","source":"review","sentiment":"complaint","severity":"high","opportunity_relevance":0.9,"reply_count":0,"comments_returned":0,"analyzed":true,"source_link_count":2,"title":"Medium Level Vulnerability Not Addressed","author":"bellinghamfitz","published_at":"2026-06-08T15:26:00+00:00","rating":1,"resolved":false,"collected_at":"2026-06-08T18:42:18+00:00","intent":"problem_report","affected_feature":"security vulnerability patch","summary":"A reviewer warned that a known CSRF vulnerability had gone unpatched for over six months and said they were migrating away from the plugin.","evidence_quote":"A Cross-Site Request Forgery vulnerability CVE-2025062958 has been known for well over 6 months","confidence":0.96,"analyzed_at":"2026-07-06T03:17:06+00:00","market_key":"copy","market_name":"Copy","market_url":"/markets/copy","opportunity_url":"/opportunities/copy","family_key":"migration-recovery","family_name":"migration and recovery assurance","opportunity_family_key":"migration-recovery","opportunity_family_name":"migration and recovery assurance","buyer":"site owners, agencies, and maintenance teams","what_to_build":"Copy preflight and recovery verification for moving, restoring, or rolling back sites without failed handoffs","urgent_problem":"Migration and recovery failures are high-stress events with expensive cleanup.","problem":"Migration and recovery failures are high-stress events with expensive cleanup.","competitor_gap":"Gap to test: can buyers preflight copy jobs, verify restore/import output, and flag failed handoffs before migration, restore, and rollback risk. pain: backup, restore, or transfer failure risk (1 signal). weak-incumbent evidence gives 45 teardown signal(s). Entry wedge:...","proof_support":"Proof base: outside proof that buyers already pay around the workflow, paid-adjacent plugin or pricing signals, repeated WordPress pain, and weak incumbent coverage around moving, restoring, or rolling back sites without failed handoffs.","needs_validation":"finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","what_still_needs_validation":"finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","commercial_attractiveness":"Commercial pull comes from site owners planning high-risk migrations: migration and recovery failures are high-stress events with expensive cleanup. The first paid wedge is to preflight copy jobs, verify restore/import output, and flag failed handoffs. Revenue can come from...","first_validation_wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","mvp_wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","decision_bucket":"proof_blocked","decision_bucket_label":"Proof Blocked","row_role":"supporting_evidence","recommendation_role":"evidence_input","evidence_role":"supports_opportunity_family","promotion_status":"linked_opportunity","promotion_status_label":"Evidence linked to opportunity","promotion_reason":"This row is supporting evidence linked to a commercial opportunity family, not the build-worthy opportunity itself.","is_build_worthy":false,"worth_validating":false,"build_worthy_scope":"opportunity_family","build_worthy_family_key":"migration-recovery","opportunity_decision_status":"supporting_evidence","body_summary":"A Cross-Site Request Forgery vulnerability CVE-2025062958 has been known for well over 6 months, and it seems likely that the software will not be updated to fix (the last update was six months ago). There are...","issue_labels":["security","support","security vulnerability patch"],"source_links":[{"source_url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","original_url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","source_page_url":"/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmedium-level-vulnerability-not-addressed%2F","source_api_url":"/api/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmedium-level-vulnerability-not-addressed%2F"}]}],"plugin":{"active_installs":1000,"api_url":"/api/plugins/simple-post-template","downloaded":89462,"name":"Simple Content Templates for Blog Posts & Pages","rating":80.0,"slug":"simple-post-template","tags":["clone","copy","duplicate post","post-template","template"],"url":"/plugin/simple-post-template"},"conversation":{"url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","slug":"simple-post-template","source":"review","title":"Medium Level Vulnerability Not Addressed","author":"bellinghamfitz","published_at":"2026-06-08T15:26:00+00:00","rating":1,"resolved":false,"reply_count":0,"collected_at":"2026-06-08T18:42:18+00:00","body_summary":"A Cross-Site Request Forgery vulnerability CVE-2025062958 has been known for well over 6 months, and it seems likely that the software will not be updated to fix (the last update was six months ago). There are others, and we’ll be migrating away ASAP. Stay away."},"analysis":{"affected_feature":"security vulnerability patch","analyzed_at":"2026-07-06T03:17:06+00:00","complaint_types":["security","support"],"confidence":0.96,"conversation_url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","evidence_quote":"A Cross-Site Request Forgery vulnerability CVE-2025062958 has been known for well over 6 months","intent":"problem_report","issue_labels":["security","support","security vulnerability patch"],"model":"codex:gpt-5.5","opportunity_relevance":0.9,"praise_types":[],"sentiment":"complaint","severity":"high","slug":"simple-post-template","source":"review","summary":"A reviewer warned that a known CSRF vulnerability had gone unpatched for over six months and said they were migrating away from the plugin."},"source_links":[{"source_url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","original_url":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","source_page_url":"/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmedium-level-vulnerability-not-addressed%2F","source_api_url":"/api/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmedium-level-vulnerability-not-addressed%2F"},{"source_url":"https://wordpress.org/plugins/simple-post-template/","url":"https://wordpress.org/plugins/simple-post-template/","original_url":"https://wordpress.org/plugins/simple-post-template/","source_page_url":"/plugin/simple-post-template","source_api_url":"/api/plugins/simple-post-template"}],"source_link_count":2,"market_key":"copy","market_name":"Copy","market_url":"/markets/copy","opportunity_url":"/opportunities/copy","opportunity_card":{"key":"migration-recovery","name":"migration and recovery assurance","family_key":"migration-recovery","family_name":"migration and recovery assurance","family_label":"migration and recovery assurance","display_name":"Copy preflight and recovery verification","opportunity_name":"Copy preflight and recovery verification","opportunity_label":"Copy preflight and recovery verification","decision_bucket":"proof_blocked","commercial_readiness_status":"needs_family_proof","commercial_readiness_label":"Needs family proof","validation_ready":false,"is_build_worthy":false,"row_role":"opportunity_family","recommendation_role":"commercial_opportunity_candidate","buyer":"site owners, agencies, and maintenance teams","who_buys":"site owners, agencies, and maintenance teams","primary_buyer_segment":"site owners planning high-risk migrations","urgent_problem":"Migration and recovery failures are high-stress events with expensive cleanup.","problem":"Migration and recovery failures are high-stress events with expensive cleanup.","pain":"Migration and recovery failures are high-stress events with expensive cleanup.","what_to_build":"Copy preflight and recovery verification for moving, restoring, or rolling back sites without failed handoffs","first_validation_wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","mvp_wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","source_count":8,"source_link_count":8,"next_action":"Finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","family_dossier_url":"/opportunities/families/migration-recovery/dossier","opportunity_family_dossier_url":"/opportunities/families/migration-recovery/dossier","family_dossier_api_url":"/api/opportunities/families/migration-recovery/dossier","opportunity_family_dossier_api_url":"/api/opportunities/families/migration-recovery/dossier","urls":{"dossier":"/opportunities/families/migration-recovery/dossier","family":"/opportunities?family=migration-recovery"},"api_urls":{"dossier":"/api/opportunities/families/migration-recovery/dossier","family":"/api/opportunities/families?family=migration-recovery"},"family_url":"/opportunities?family=migration-recovery","opportunity_family_url":"/opportunities?family=migration-recovery","opportunity_family_api_url":"/api/opportunities/families?family=migration-recovery","commercial_gate_status":"complete","commercial_gate_label":"Gate complete","commercial_card_status":"complete","commercial_card_missing_count":0},"commercial_card_summary":{"status":"complete","status_label":"complete","missing_count":0,"passed":9,"required":9,"summary":{}},"commercial_card_checklist":[{"key":"what_to_build","label":"What to build","passed":true,"status":"pass","detail":"Copy preflight and recovery verification for moving, restoring, or rolling back sites without failed handoffs"},{"key":"specific_buyer","label":"Specific buyer","passed":true,"status":"pass","detail":"site owners, agencies, and maintenance teams"},{"key":"urgent_problem","label":"Urgent problem","passed":true,"status":"pass","detail":"Migration and recovery failures are high-stress events with expensive cleanup."},{"key":"competitor_gap","label":"Competitor gap","passed":true,"status":"pass","detail":"Gap to test: can buyers preflight copy jobs, verify restore/import output, and flag failed handoffs before migration, restore, and rollback risk. pain: backup, restore, or transfer failure risk (1 signal). weak-incumbent"}],"family_key":"migration-recovery","family_name":"migration and recovery assurance","opportunity_family_key":"migration-recovery","opportunity_family_name":"migration and recovery assurance","buyer":"site owners, agencies, and maintenance teams","what_to_build":"Copy preflight and recovery verification for moving, restoring, or rolling back sites without failed handoffs","urgent_problem":"Migration and recovery failures are high-stress events with expensive cleanup.","problem":"Migration and recovery failures are high-stress events with expensive cleanup.","competitor_gap":"Gap to test: can buyers preflight copy jobs, verify restore/import output, and flag failed handoffs before migration, restore, and rollback risk. pain: backup, restore, or transfer failure risk (1 signal). weak-incumbent evidence gives 45 teardown signal(s). Entry wedge: preflight copy jobs, verify restore/import output, and flag failed handoffs.","proof_support":"Proof base: outside proof that buyers already pay around the workflow, paid-adjacent plugin or pricing signals, repeated WordPress pain, and weak incumbent coverage around moving, restoring, or rolling back sites without failed handoffs.","needs_validation":"finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","what_still_needs_validation":"finish the missing outside proof, then test buyer urgency with site owners planning high-risk migrations: preflight copy jobs, verify restore/import output, and flag failed handoffs.","commercial_attractiveness":"Commercial pull comes from site owners planning high-risk migrations: migration and recovery failures are high-stress events with expensive cleanup. The first paid wedge is to preflight copy jobs, verify restore/import output, and flag failed handoffs. Revenue can come from scheduled backups, restore verification, cloud storage, managed migrations, and multi-site controls.","first_validation_wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","mvp_wedge":"preflight copy jobs, verify restore/import output, and flag failed handoffs","decision_bucket":"proof_blocked","decision_bucket_label":"Proof Blocked","api_urls":{"evidence":"/api/evidence?slug=simple-post-template","market":"/markets/copy","opportunity":"/opportunities/copy","plugin":"/api/plugins/simple-post-template","source":"/api/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmedium-level-vulnerability-not-addressed%2F","wordpress":"https://wordpress.org/support/topic/medium-level-vulnerability-not-addressed/","family":"/api/opportunities/families?family=migration-recovery","dossier":"/api/opportunities/families/migration-recovery/dossier"},"commercial_readiness":{"total":26,"validation_ready":0,"core_validation_ready_rows":0,"family_wide_validation_ready_rows":0,"core_only_validation_ready_rows":0,"validation_scope_status":"not_ready","validation_scope_label":"Not ready","validation_scope_warning":"","validation_scope_counts":[{"scope":"not_validation_ready","label":"Not validation-ready","count":26}],"blocker_count":50,"caution_count":0,"status_counts":[{"status":"needs_external_proof","label":"Needs outside proof","count":25},{"status":"needs_family_proof","label":"Needs family proof","count":1}],"blocker_counts":[{"label":"Outside proof needed: not validated","count":25},{"label":"Commercial gate not complete: proof blocked","count":25}],"caution_counts":[],"ready_for_buyer_validation":0,"needs_external_proof":25,"needs_family_proof":1,"needs_report":0,"needs_thesis_detail":0,"needs_thesis_sharpening":0,"research_first":0,"research_only":0,"hold":0,"unclassified":0,"core_wedge_validation_ready_rows":0,"full_family_validation_ready_rows":0,"scope_limited_validation_rows":0,"full_family_claim_ready_rows":0,"validation_claim_scope_policy":"Core-only validation rows are worth buyer testing, but they must not be presented as full-family commercial opportunities until family_wide_validation_ready is true."},"readiness_summary":{"total":26,"validation_ready":0,"core_validation_ready_rows":0,"family_wide_validation_ready_rows":0,"core_only_validation_ready_rows":0,"validation_scope_status":"not_ready","validation_scope_label":"Not ready","validation_scope_warning":"","validation_scope_counts":[{"scope":"not_validation_ready","label":"Not validation-ready","count":26}],"blocker_count":50,"caution_count":0,"status_counts":[{"status":"needs_external_proof","label":"Needs outside proof","count":25},{"status":"needs_family_proof","label":"Needs family proof","count":1}],"blocker_counts":[{"label":"Outside proof needed: not validated","count":25},{"label":"Commercial gate not complete: proof blocked","count":25}],"caution_counts":[],"ready_for_buyer_validation":0,"needs_external_proof":25,"needs_family_proof":1,"needs_report":0,"needs_thesis_detail":0,"needs_thesis_sharpening":0,"research_first":0,"research_only":0,"hold":0,"unclassified":0,"core_wedge_validation_ready_rows":0,"full_family_validation_ready_rows":0,"scope_limited_validation_rows":0,"full_family_claim_ready_rows":0,"validation_claim_scope_policy":"Core-only validation rows are worth buyer testing, but they must not be presented as full-family commercial opportunities until family_wide_validation_ready is true."},"evidence_summary":{"total":1,"source_evidence_rows":0,"source_link_rows":1,"source_count_only_rows":0,"missing_source_evidence_rows":0,"source_evidence_not_applicable_rows":0,"source_link_coverage_percent":100.0,"evidence_required_rows":0,"evidence_required_rows_missing_source_links":0,"build_worthy_rows_missing_source_links":0,"decision_rows_missing_source_links":0,"missing_source_examples":[]},"cache":{"source":"durable_stale","generated_at":"2026-08-05T07:18:03+00:00","age_seconds":11150},"row_role":"supporting_evidence","recommendation_role":"evidence_input","evidence_role":"supports_opportunity_family","promotion_status":"linked_opportunity","promotion_status_label":"Evidence linked to opportunity","promotion_reason":"This row is supporting evidence linked to a commercial opportunity family, not the build-worthy opportunity itself.","is_build_worthy":false,"worth_validating":false,"build_worthy_scope":"opportunity_family","build_worthy_family_key":"migration-recovery","opportunity_decision_status":"supporting_evidence"}