wordpress-plugin-core

Secure WordPress plugin development requires implementing ABSPATH checks, nonce verification, data sanitization, output escaping, capability checks, and prepared statements for database queries. This Skill provides structured templates in Simple, OOP, and PSR-4 architectures with built-in security patterns to scaffold plugins that meet WordPress standards.

WordPress REST API endpoints require proper authentication, nonce verification, and capability checks. This Skill includes patterns and templates for building secure REST endpoints that follow WordPress conventions, with guidance on input sanitization and output escaping for API responses.

Secure AJAX in WordPress requires nonce verification, capability checks, and data sanitization before processing. This Skill provides AJAX handler templates demonstrating proper security checks and prepared statement patterns to prevent injection vulnerabilities.

Yes. The Settings API works across Simple, OOP, and PSR-4 plugin architectures. This Skill includes templates for each approach, showing how to register settings, sanitize input, and build admin pages that comply with WordPress security and UI standards.

WordPress plugin lifecycle requires proper activation and uninstallation hooks to set up database tables, options, and cleanup routines. This Skill covers structured patterns for registration hooks and safe data removal to prevent orphaned database entries.

Yes. Prepared statements prevent SQL injection and are a security requirement for all database interactions. This Skill demonstrates WPDB prepared statement patterns using placeholders and escaping functions across different plugin architectures.