php-wordpress-audit

To audit WordPress plugins for CSRF and authorization bypass, inspect nonce validation and capability checks. This skill standardizes the examination of these controls to identify authorization weaknesses and map them to unified vulnerability categories.

Performing a white-box security audit on a WordPress theme requires analyzing output escaping, redirects, and remote requests. This skill examines escaping routines and uploads to identify XSS and SSRF issues, generating a structured audit report.

Yes, this WordPress security audit covers SQL injection and XSS vulnerabilities. It analyzes output escaping routines and remote requests, mapping findings to a unified vulnerability taxonomy that explicitly includes XSS and SQL risk categories.

Yes, you can use this skill to check admin-ajax actions for security weaknesses. It inspects AJAX actions to assess common vulnerabilities, verifying that nonce checks and capability gating are properly implemented to prevent unauthorized access.

To generate a structured WordPress vulnerability report, you need accessible WordPress core, theme, or plugin code. This skill analyzes the codebase to examine security controls and outputs a report including risk mappings and evidence requirements.