Sanitation needed for WP_Query or get_posts calls?

No. Parameters given to the WP_Query object only need to be escaped for the database query – this is handled by WordPress.

Leave a Comment