Agnosticon WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Low-severity findings only.

Audited release

0.0.17

Findings

1

Worst severity

low

Content hash

27de211419521c0eea0701a5… Copy

Findings

• low Unauthenticated icon cache clear

  agnosticon_clear_action is registered for wp_ajax_nopriv__agnosticon_clear and deletes the agnosticon_data transient with no nonce or capability check.

  lib/actions.php:76-86

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.