WordPress nonce

Simple definition

A WordPress nuncio helps to verify that, an action comes from a expected context.

Technical definition

WordPress nuncios are temporary chips linked to an action and session, but are not secrets for strict single use.

What’s the point?…

reduce the risk of forged queries on administration actions.

Concrete example

an admin form uses wp_nonce_field and wp_verify_nome.

Common problems

• expired nuncio
• different action
• cache used as an old form

To be noted: Always adapt the diagnosis to the version of the product and to the architecture actually deployed.