This repository has been archived by the owner on Sep 29, 2023. It is now read-only.

Nonces #10

Open

schuhwerk opened this issue May 23, 2020 · 0 comments

Milestone

Invitation Link

Member

schuhwerk commented May 23, 2020

The ajax requests currently don't use nonces which makes CSRF possible.
For more info see: https://codex.wordpress.org/WordPress_Nonces

schuhwerk added this to the Invitation Link milestone

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.