“Processing form data without nonce verification” error on wp_verify_nonce

Hello @codasaurus ,

Thanks for asking for that. The right way is velidate any form data. It will be my pleasure if the following example can help:
wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ), 'set_options' )

Yes, you need to sanitize the post.

Thank you. Then it would be much more helpful if the error message would say “Processing post field without sanitization”. In its current state it is confusing because it references failure to perform the nonce verification as the problem on the call to perform nonce verification.

You could suggest as this check is based in WordPress Coding Standards here:

https://github.com/WordPress/WordPress-Coding-Standards/issues