·
13 commits
to main
since this release
351446f
This commit was signed with the committer’s verified signature.
SteveKinzey
Stephen J. Kinzey, Ph.D.
Security Update
Bot Protection
- Nonce Verification — REST API endpoints now require valid WordPress nonce
- Rate Limiting — Max 30 requests per minute per IP address
- Proxy Support — Detects real client IP behind Cloudflare, nginx, load balancers
Why This Matters
Prevents malicious actors from:
- Locking inventory without real purchase intent
- Enumerating stock levels via API
- Denial-of-service attacks on inventory
Upgrade
Recommended for all users. No configuration changes required.