Miles DataEngine Events WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Low-severity findings only.

Audited release

1.5.0

Findings

1

Worst severity

low

Content hash

852d7ada514b7d870919eedb… Copy

Findings

• low Event list HTML built without escaping titles/URLs

  missing_escaping

  paged_list_item and related renderers interpolate post_title, permalink, and thumbnail_url into HTML without esc_html/esc_url. Content comes from the events CPT (typically editors). Not directly attacker-controlled for Subscribers.

  inc/Events.php:709-717

  Recommendation

  Use esc_url and esc_html when building event list HTML.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.