Melapress / admin-notices-manager

Admin notices manager is a WordPress plugin that allows you to better manage the admin notices in the WordPress dashboard so you read them at your own convenience and never miss an important message.
https://www.wpwhitesecurity.com/wordpress-plugins/admin-notices-manager/
Other
0 stars 0 forks source link

Address low hanging fruit security issues - apply the basics #95

Closed robert81 closed 3 months ago

robert81 commented 5 months ago

Lately we've had a few vulnerabilities reported. Granted, most of them are very hard to exploit etc, and a software can never be flawless, but let's do our best and at least address what we can.

Please spend a day or two reviewing the plugin and let's ensure that we address the basics, for example:

Sanitise / check inputs / user inputs Esure the libraries we are using are the latest Anything that needs authorization / nonce let's use them etc.... This also applies to future development: anything new we do should be double checked. IT helps when cross-chccking each others' code.