Using Nonces for AJAX that only retrieves data

No, it is not needed. If you want to show the data to some users only, you can use current_user_can( 'some_capability' ) to restrict the access.

Related Posts:

  1. How to get a unique nonce for each Ajax request?
  2. Nonces and Cache
  3. Is it safe to assume that a nonce may be validated more than once?
  4. Multiple ajax nonce requests
  5. How to verify nonce from Bulk/Quick Edit in save_post?
  6. How to add WordPress nonces to ajax request
  7. Nonces and Ajax request to REST API and verification
  8. Ajax function returns -1
  9. Serving nonces through AJAX is not refreshing nonce, returning 403 error
  10. wp_verify_nonce always returns false when logged in as admin
  11. ajax and nonce when JavaScript is in a seperate file
  12. wp_verify_nonce doesn’t return true on server when it matches the nonce
  13. AJAX requests broken due to HTTPS for wp-admin
  14. Nonces, AJAX, script variables & security in WordPress
  15. Why does WordPress Heartbeat login not refresh the nonces?
  16. wp-admin AJAX with Fetch API is done without user
  17. How do I check if AJAX nonces are implemented correctly?
  18. How to check an ajax nonce in PHP
  19. Can a wp_nonce created from domain 1 to be verified on domain 2?
  20. how to send Ajax request in wordpress backend
  21. Identical wp_rest nonce returned from rest_api
  22. WP Admin AJAX Security – using POST to include a relative URL
  23. wp_create_nonce() in REST API makes user->ID zero
  24. ajax nonce verification failing
  25. SSO autologin WordPress + Ajax
  26. Nonce fails on ajax save
  27. Unable to successfully verify nonce
  28. Cache plugins and ajax nonce verification
  29. Nonce doesn’t validate in nopriv call
  30. Why does check_ajax_referer give a 403 error on https websites?
  31. WordPress is creating nonce as a logged in user but verifying it incorrectly
  32. javascript ajax and nonce
  33. How to check nonce lifetime value of plugins?
  34. Using nonce when loading posts with AJAX
  35. Should wordpress nonce be placed in html form or in javascript file
  36. wp_verify_nonce not working on the mobile device
  37. How do I mitigate replay attacks when talking about actions that shouldn’t happen twice?
  38. AJAX form not working, still reloads on submit
  39. Ajax Security regarding user priviliges and nonces
  40. How to use nonces for frontend AJAX voting if the page gets cached?
  41. WordPress wp_localize_script nonce and ajax URL
  42. Google Maps API throws “Uncaught ReferenceError: google is not defined” only when using AJAX
  43. Initialize TinyMCE editor / visual editor after AJAX insert
  44. WP-AJAX vs WP REST API: What to use for requests to the website from outside?
  45. SSL breaks customizer: page isn’t returned from ajax
  46. AJAX vs Fragment Caching for W3 Total Cache [closed]
  47. Detecting post type within init action
  48. Delete row of custom table in WordPress using AJAX
  49. jQuery Autocomplete in WordPress
  50. Metabox cloning via Admin Ajax call issue
  51. help on wp_editor via ajax load [duplicate]
  52. How to allow to user non logged in WP system upload in media library?
  53. Buddypress ajax problem after adding new groups sub nav [closed]
  54. How to check username availability with ajax at registration
  55. admin-ajax.php slow, how to speed it up?
  56. I’m getting a 401 while calling the wp-json endpoint via ajax
  57. Unable to parse JSON response from wp_send_json_success [closed]
  58. problem with WordPress ajax
  59. Ajax simple experiment
  60. How to make tabulator ajax call in wordpress?
  61. How would you update a frontend form with AJAX
  62. Are nonces in WP REST API optional by default?
  63. Radio buttons live refresh in the customizer
  64. Admin ajax add tag callback
  65. Stop auto load wp-admin admin-ajax.php
  66. wp_enqueue_script() doesn’t work with AJAX
  67. Ajax Request for both logged and non logged users
  68. AJAX call inside plugin class not triggering
  69. WordPress Heartbeat API cannot parse data
  70. Ajax function on #publish only saves as draft – how to make it publish?
  71. AJAX call broken after actualization
  72. WP_Ajax Hook doesn’t execute this PHP code
  73. Ajax function not returning any results
  74. wp_mail doesn’t work when logged in?
  75. Need help with Access-Control-Allow-Origin
  76. Send email via ajax
  77. wp_ajax handler with multiple class instances
  78. admin-ajax.php (aborted) error when using jQuery.get
  79. Storing temporary data for a custom post type
  80. Load page HTML content through AJAX
  81. Display full WordPress post under search form using AJAX
  82. Ajax callback not work
  83. WordPress Select Option Load Custom Fields
  84. Add ajax to plugin in admin area
  85. Search live Ajax
  86. jQuery.post returns 0
  87. Ajax login fails: script sets cookies, but is_user_logged_in() returns false
  88. admin-ajax error 400
  89. wordpress admin ajax trash_comment
  90. delete post meta data in array WordPress
  91. How to trigger lost password email using REST API?
  92. Display post thumbnail after clicking on post id with AJAX
  93. Manually cache a special, non-WP-but-using-WP page (e.g. Ajax results) with W3TC
  94. Is it a good idea to init ajax functions only while ‘DOING_AJAX’
  95. register_setting and AJAX?
  96. ajax response is 0 instead of ‘script’ [duplicate]
  97. A refreshless WordPress website
  98. get_template_part() does not render after the ajax request
  99. Front-end ajax problem all users and guests getting a 302 redirect when accessing wp-admin/admin-ajax.php
  100. Use Ajax to get an Options Settings Value

Leave a Comment