Skip to content

Files

Latest commit

 

History

History
14 lines (8 loc) · 709 Bytes

WordPress.CSRF.NonceVerification.md

File metadata and controls

14 lines (8 loc) · 709 Bytes

Pattern: Missing nonce verification

Issue: -

Description

Checks that nonce verification accompanies form processing.

If your plugin allows users to submit data; be it on the Admin or the Public side; you have to make sure that the user is who they say they are and that they have the necessary capability to perform the action. Doing both in tandem means that data is only changing when the user expects it to be changing.

Further Reading