Theme Check is a tool published by the WP.org Themes team to scan your theme against the wp.org security standards. There’s also one for plugins.
Any default functionality like comment forms will already be escaped/sanitized.
Related Posts:
- What are the common security flaws I need to look for? [closed]
- Where should my plugin POST to?
- When is it useful to use wp_verify_nonce
- Retrieving a Value from a wp-database
- wp_create_nonce function doesn’t work inside a plugin?
- WordPress WPforms customization
- Using AJAX to run SQL statement and populate dropdown
- Custom Formdata matching with user table
- How can i see/log all requests coming from a registration form (not from the UI)?
- Malicious File Upload [closed]
- How to insert HTML/JavaScript form into WordPress page? [closed]
- Trying to fix form resubmition with PRG (Getting error: Cannot modify header information – headers already sent by)
- Migrating to WordPress Recipe Plugin and Some SQL Issues
- How do I make a child theme I made POST through a 3rd party plugin?
- Stop Plugin Enumeration [closed]
- WP Plugins – Use includes to display page content
- How to fetch form data and show it to my page?
- Malware installation during plugin update?
- Plugin to create forms using HTML [closed]
- Submit custom form from post content and execute in plugin
- How to allow user to select User ID in Formidable Pro form? [closed]
- Char limit on custom blog-post form? [closed]
- Hack-Proof OR Security in WordPress — is it real?
- How to create multiple database tables on plugin activation?
- I should enable automatic updates?
- Does deleting a Plugin via the WordPress admin ‘completely’ remove the code?
- Can some vulnerabilities in plugins be exploited even when the plugin is inactive?
- AJAX fileupload – TypeError: not a function ajaxSubmit()
- Security and Must Use Plugins
- Is there a way to embed a Google Docs form in a page without using plugins?
- Is Timthumb still broken? What security measures should be taken?
- Detailed form plugin, with ability to export to excel etc. OR edit PDF live? [closed]
- easy steps to make front end form without plugin
- Speeding SQL queries for a large database?
- Prevent direct access to WordPress plugin assets?
- Form that generates an ID for the customer
- correct validate and sql query
- correct sql query
- SQL query, error
- Submit Form data to another page via Ajax (WordPress Way)
- WordPress checkbox and Illegal string offset
- $wpdb update query in plugin only updating one column
- Editing a text file from plugin menu
- Is it safe to use admin-ajax.php in the frontend?
- How to protect WordPress from security scanner [closed]
- Specific way to allow WordPress users to view their current password? And edit it?
- Too many login attempts
- Ajax Plugin Not Echoing Response
- Is there any pre-existing plugin to track and block IPs with suspicious activity on my site?
- Plugin that will output submitted form data for user? [closed]
- How to handle forms from sidebar widgets – Processing $_POST variables using get_field_name()
- How to prevent plugins from sniffing/stealing other plugins’ options?
- How do I add the same contact form to multiple wordpress sites and capture the response in one place or database?
- Website show Google Ads when we have no Google Ads linked to our website
- Vulnerability Concern From the Plugin or From Not Updating the Plugin?
- coding a WordPress AJAX Form using PHP to check if User is Logged Out and Show error
- Woocommerce Backend Search by Title and SKU
- Custom API plugin to execute 3rd party API to retrieve data
- How to deal with Slow HTTP POST (slowloris) vulnerability
- problem with sql query
- Running multiple security plugins
- how do I secure my WP website from hackers? [closed]
- Deactivation Hook does not remove database
- Creating a form and displaying entry data as a table
- Chrome Dev Tools console says every page in my blog has link to http://maps.google.com [closed]
- How can ι create my own (custom) WordPress table/list?
- Gravity Forms returns to odd position
- Storing The Data Collected by Ninja Forms into Another (custom) Database [closed]
- WordPress Multi-Step Product Search
- Sell access to form [closed]
- File Uploader – Upload without adding to Media Library
- Webservice credential storage [duplicate]
- Custom form not showing in correct place on page
- add_meta_box creating default form field types
- Form Plugin for Api Requests which is used via Shortcode
- How to redirect to a page after the form is submitted
- Call another page in forms
- Echo out element to another page.
- Regarding plugin security
- How to Use the Filter “sidebar_login_widget_form_args”
- Select Form Element Not Saving from Plugin Options
- How do I determine if the user who registered is not spam?
- Storing Form data in a different database
- Is it save to replace with in WordPress search form
- If I use an alternative login (e.g. CAS or other SSO) plugin, is my site protected from the recent brute force login attempts?
- Contact Form 7 Plugin emails not being received by some accounts
- Contact Form 7 “non-selectable” options in a drop down [closed]
- Is this plugin safe to run?
- How to append new form elements in “Add New” form of Users in WordPress admin panel?
- Looking for a simple checkout plugin [closed]
- Redirect plugin after form submit or show errors
- Is the Block Bad Queries Plugin Still Relevant?
- Plugin for visitors to edit content without logging in? [closed]
- WP Insert Post If user refreshes override new post
- 404 errors when updating options in admin dashboard
- Website Captcha Error: The reCAPTCHA wasn’t entered correctly
- Adding CASE in WP_Query
- How do I send the contents of a form to deliver to the already existing custom field in the wordpress theme
- Hide plugins and theme from public
- WordPress search shows protected content