Nonces and Security in WordPress Plugins — a practical guide to WordPress nonce with clear examples you can reuse in real projects.
WordPress Plugin Development Series (23/95). Prefer one article? Read the complete WordPress plugin development tutorial.
Short description
Nonces help verify intent/origin for forms and AJAX. Always pair with capability checks — nonces are not permissions.
Create and verify
wp_nonce_field('acme_save_action');
// ...
check_admin_referer('acme_save_action');
// AJAX:
check_ajax_referer('acme_ajax', 'nonce');