hostinger-ops — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hostinger-ops (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Hostinger has THREE independent cache layers. Most cache-related problems are because someone purged ONE layer (usually the WordPress plugin) and assumed it was done.
| Layer | Where to purge it |
|---|---|
| 1. LiteSpeed Cache plugin | wp-admin → LiteSpeed Cache → Toolbox → Purge All |
| 2. Hostinger CDN edge (the killer) | hPanel → Websites → your site → Dashboard → "Clear cache" button |
| 3. Server-side cache | Same "Clear cache" button purges this too |
The hPanel "Clear cache" button purges all three at once. This is the one button that actually fixes most stale-content issues. The wp-admin LiteSpeed purge does NOT touch Hostinger CDN.
When Hostinger auto-creates a WordPress install:
Symptoms:
curl it, but real browsers see stale contentFix: hPanel Dashboard → "Clear cache" button. One click. Done.
Run these in order. Stop at the first one that proves which layer is stale:
# 1. Does the SERVER return correct content?
curl -s "https://YOUR-SITE.com/?bust=$(date +%s%N)" | grep -oE '<title>[^<]+</title>'
# 2. Does the cache header say "hit" (cached) or "miss" (fresh)?
curl -sI "https://YOUR-SITE.com/" | grep -iE 'litespeed|cache'
# 3. Are there multiple WP installs at the domain? (rare but check)
curl -sI "https://YOUR-SITE.com/wordpress/wp-login.php"
curl -sI "https://YOUR-SITE.com/blog/wp-login.php"If step 1 shows correct content but a real browser sees wrong content → it's the Hostinger CDN edge cache. Use the hPanel button.
If step 1 shows WRONG content → the actual WordPress install has the wrong content. That's a WP-level issue, not cache.
Most people use Premium and don't realize they have no SSH access. That's why Theme File Editor + Plugin Upload via wp-admin are the only options.
Every fresh Hostinger WordPress install comes with:
Recommended cleanup on day one:
Hostinger Premium has no SSH, so wp-cli is out. Your options:
Theme File Editor uses CodeMirror. If you're driving it via JavaScript automation, setting textarea.value directly does NOT update CodeMirror. You must use the CodeMirror API:
const cm = document.querySelector('.CodeMirror').CodeMirror;
cm.setValue(cm.getValue() + yourSnippet);
cm.save(); // syncs CodeMirror -> underlying textarea
document.getElementById('submit').click();Hostinger uses these IP ranges (helpful for dig/curl --resolve debugging):
82.25.x.x, 145.79.x.x (commonly)2a02:4780::/32Confirm with:
curl https://cloudflare-dns.com/dns-query?name=YOUR.com&type=A -H "accept: application/dns-json"Almost never. Hostinger's panel only shows ONE website slot per domain on Premium plans. If you see "different content for different users", it's almost always:
If your site changes content frequently and you keep hitting cache issues:
| Error / symptom | Real cause | Fix |
|---|---|---|
| Stale content for anonymous users only | Hostinger CDN edge cached old version | hPanel Clear cache |
| 503 errors after deploy | LiteSpeed not happy with new theme | wp-admin → LiteSpeed → Toolbox → Purge All |
| Database connection error | wp-config.php has wrong DB credentials | hPanel → Files → wp-config.php → fix |
| File upload size limit | PHP upload_max_filesize too low | hPanel → Advanced → PHP Configuration |
| "Briefly unavailable for scheduled maintenance" | .maintenance file stuck | hPanel File Manager → delete .maintenance in /public_html/ |
| Email broken | DNS records pointing wrong | hPanel → Emails → DNS Records |
A WordPress site for an air conditioning company in Riyadh launched May 3, 2026. Hostinger auto-created the install with default Hello world content. The owner spent 3 days configuring a custom theme, writing 13 blog posts, setting up Search Console + Analytics. Logged into wp-admin, everything looked perfect. But customers kept reporting they saw "Welcome to WordPress. This is your first post" with the default theme.
The owner cleared the WordPress cache (LiteSpeed). No change. The owner cleared their browser cache. No change. The owner suspected DNS hijacking, duplicate installs, viruses, hackers.
Real cause: Hostinger's CDN edge had cached the empty install from May 3 and was serving it to anyone whose request hit certain edge nodes. The fix was a single click: hPanel → Dashboard → "Clear cache". Site instantly correct for everyone.
If the owner had known about the three-cache structure, this would have been resolved in 30 seconds instead of 3 days.
Skill maintained at https://github.com/OmarEltak/wp-rescue-kit
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.