Viewing 1 replies (of 1 total)
  • Plugin Author Rogier Lankhorst

    (@rogierlankhorst)

    Yes. If you do a search on ‘wp_verify_nonce’ you will see that the plugin uses the nonce check where necessary.

    Additionally, several files are never even loaded for not logged in users, and admin functions as locked behind capability checks.

    All $_POST and $_GET properties are sanitised before processed.

    Let me know if you have any questions.

Viewing 1 replies (of 1 total)
  • The topic ‘Does it use Nonces’ is closed to new replies.