XSS generally would only occur through AJAX or form handling. Verify a referrer header is actually from your FQDN and/or require a captcha, providing pseudorandom input validation.
Related Posts:
- Using classes instead of global functions in functions.php
- Template for individual post designs
- Front End Post Submit Form
- Upgrading a custom theme through the Dashboard
- Theme Customizer not loading
- Version control for both Vagrant config and themes being developed [closed]
- How to correctly add JQuery in a WP theme?
- How to add a second stylesheet to the editor
- WP 3.1 upgrade breaks AutoFocus+ theme
- How to make theme elements customizable in wordpress?
- Limitations when modifying wp_title with a filter
- How to edit theme functions file to modify pagination?
- Customizer: save setting/control content to post/page
- Customize how a WordPress theme looks like in the Theme Selector
- Customizer – loading settings/controls/sections/panels based on a id/page id
- Integrate WooCommerce theme with a WordPress theme [closed]
- Widget Option is Missing
- How do you use WordPress for a website that’s not in a blog format?
- searchform.php doesn’t work properly
- Customizer: get_preview_url() inside customize_save_after hook
- New to WordPress – Read the Codex, Other Docs; Still Confused
- Create theme for mobile phones and tablets only?
- How to add custom page elements to the WYSIWYG editor?
- Can’t change theme name
- Is hand coding required at all?
- WordPress Twenty-Fourteen: How to Remove Home Page Header Image from Other Pages
- How to dowload and edit content of a website
- Any way to permanently translate themes?
- Best strategy for providing theme options using customizer
- How Does One Create a Global Variable Repository
- How to convert that page to a wordpress template? [closed]
- Turning WordPress Into full-featured website?
- Sizing screenshot.png without losing aspect ratio
- How To Add New Option Types To Option Tree?
- Page template in two level deep folder
- Best practices – Should I create a child theme vs. customizing a framework theme? (such as HTML5 reset)
- Child Theme not loading parent CSS
- Where do I find the functions triggered within a hook?
- Use of undefined constant FS_CHMOD_DIR – assumed ‘FS_CHMOD_DIR’
- Registering Sidebars and Sidebar Widgets. Sidebar Widgets Not Displaying
- How do I get a parent theme modification from a child theme?
- Removing the default sidebar from admin panel
- How the WordPress sidebar works
- Extend walker – navigation, adding data attribute to a tag
- how to pull wordpress post comments to a external page
- Why use while over if in single wordpress posts?
- WordPress website loads but is not displayed until page scrolled
- wp_head() not inserting the default stylesheet style.css
- First completely customized theme, where should I start?
- Best practices: Custom theme sidebar menu – hardcode or widget?
- Is it a good idea to make whole theme widgetized?
- Single Theme folder for Multiple WordPress
- How i can get widgets areas working in customizer?
- Cutomize Colors utility: How to add more configurable colors to a theme
- Cannot figure out how to overwrite files in child theme
- WordPress post arrangement using post_class
- Removing non native customizer settings from a child theme
- Customize the previous_post_link output
- which is the best way to customize nav-menu-template.php?
- wp-cli: For development, how can I activate a theme that is on the local disk but not zipped?
- My Admin bar covers my sticky navbar [closed]
- Single Page Design, Storing in Theme Options
- Edit footer via customizer
- “Add A Widget” button in the Customizer
- Move default page templates to sub directory
- loading blank white screen of slide
- Child Theme’s style.css not loading in mobile browser
- Migrated WordPress site renders Chinese
- How to Find the Page the Front Page is Using?
- WooCommerce: multiple input field for multiple product variations
- How do I get the trackback count of a post in wordpress without writing an SQL query?
- Child Theme header1.php file not overwriting parent theme’s header1.php file
- 3 Level Deep Navigation Menu Not Showing All Levels
- How to Have a Pure HTML Sub Directory In WP Site
- Theming Using Bootstrap Glyphicons and WordPress Dashicons
- WordPress page/blog incorporated into static website
- Random white space before doctype
- How to add menù section to my WordPress template?
- What are the critical theme files when building a custom theme?
- Having issue with WordPress wp_enqueue_style
- Starting point for custom Themes [closed]
- How add built-in textarea in theme development?
- Filter didn’t work on content class (hybrid_post_attributes)
- Trying to link to a php template file but its blank
- Theme author.php transfer
- Custom Enfold theme tab layout not compatible with WPML
- How to test another theme in a live WordPress website instead of live preview?
- WordPress uploads do not show up and I see the white screen of death in some cases
- Can’t upload images on new theme
- Import from HubSpot COS into WordPress 4?
- WordPress 3.5 + Foundation 5 not working on IE9
- Theme customizer live preview JS- Trying to bind to an html image url without luck
- Theme automatically inserting “more” tag on every post
- How get the 10 most viewed pages (not post)
- Using wp_enqueue_script with social media buttons?
- Permalinks problem with custom theme
- Purchased Theme to Custom Made Theme? [closed]
- How to make website with many template that active [closed]
- How to create full header but keep content narrow
- Correct way to make a custom block theme responsive