WP Manifestindependent plugin directory
manifest / developer / xophz-compass-enchiridion

Xophz Enchiridion Library WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

Curated handbook and execution engine for reusable site maintenance scripts, hooks, and magic snippets.

★ 0stars
16release downloads
v26.9.4latest · 1mo ago

Install

Download xophz-compass-enchiridion-26.9.4.zip From the v26.9.4 release on GitHub, Sep 5, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/hallofthegods/xophz-compass-enchiridion/releases/download/v26.9.4/xophz-compass-enchiridion-26.9.4.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Category: Wizard's Tower · Version: 0.0.1

A library of magical scripts and snippets ready for use on your site.

Description

Enchiridion Library is a code snippet manager for COMPASS. It provides a safe, organized way to add custom PHP, JS, and CSS snippets to your site without editing theme files - including a curated recipe library of pre-built solutions.

Core Capabilities

  • Snippet Management – Create, edit, and toggle custom code snippets via a Custom Post Type.
  • Safe Execution – Snippets are executed through a controlled executor class to prevent fatal errors.
  • Recipe Library – Pre-built snippet recipes for common WordPress customizations.
  • Code Categories – Organize snippets by type and purpose.

Requirements

  • Xophz COMPASS parent plugin (active)
  • WordPress 5.8+, PHP 7.4+

Installation

  1. Ensure Xophz COMPASS is installed and active.
  2. Upload xophz-compass-enchiridion to /wp-content/plugins/.
  3. Activate through the Plugins menu.
  4. Access via the My Compass dashboard → Enchiridion.

PHP Class Map

Class File Purpose
Xophz_Compass_Enchiridion class-xophz-compass-enchiridion.php Core plugin hooks
Xophz_Compass_Enchiridion_Post_Type class-xophz-compass-enchiridion-post-type.php Custom Post Type for snippets
Xophz_Compass_Enchiridion_Executor class-xophz-compass-enchiridion-executor.php Safe snippet execution engine
Xophz_Compass_Enchiridion_Recipes class-xophz-compass-enchiridion-recipes.php Pre-built snippet recipe library

Frontend Routes

Route View Description
/enchiridion Dashboard Snippet library with search, toggle, and editor

Changelog

0.0.1

  • Initial release with snippet CPT, executor, and recipe library

Releases

12 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v26.9.4 latest
Sep 5, 2026 1mo ago
xophz-compass-enchiridion-26.9.4.zip
4
Sep 5, 2026 1mo ago
xophz-compass-enchiridion-26.9.5.zip
2
Sep 2, 2026 1mo ago
xophz-compass-enchiridion-26.9.1.zip
1
Sep 2, 2026 1mo ago
xophz-compass-enchiridion-26.9.2.zip
1
Aug 31, 2026 1mo ago
xophz-compass-enchiridion-26.8.30.zip
1
Aug 31, 2026 1mo ago
xophz-compass-enchiridion-26.8.31.zip
1
May 10, 2026 5mo ago
xophz-compass-enchiridion-26.5.9.zip
0
May 10, 2026 5mo ago
xophz-compass-enchiridion-26.5.10.zip
5
May 3, 2026 5mo ago
xophz-compass-enchiridion-26.5.2.zip
0
May 3, 2026 5mo ago
xophz-compass-enchiridion-26.5.3.zip
0
Apr 28, 2026 5mo ago
xophz-compass-enchiridion-26.4.28.zip
1
Apr 27, 2026 5mo ago
xophz-compass-enchiridion-26.4.27.zip
0
C- grade

Security

Xophz Enchiridion Library 26.9.4-170 · audited by WP Registry

High-severity findings.

1 high
Audited release
26.9.4-170
Findings
1
Worst severity
high
Content hash
156c9c7b183cec3227c27b58…

Findings

  • high AJAX toggle/get recipes missing capability and nonce

    missing_capability

    wp_ajax_get_recipes, toggle_recipe, get_custom_code registered without capability checks — information disclosure and enable/disable of PHP recipes for any authenticated user.

    includes/class-xophz-compass-enchiridion.php:187-190

    Recommendation

    Gate all handlers with manage_options and nonces.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.