Does it handle plugin uninstallation?

Yes, it emphasizes the use of an uninstall.php file to ensure clean database removal of options and transients without leaving orphaned data.

Can it help with custom database tables?

Yes, it provides patterns for using the $wpdb global to safely interact with both core and custom database tables using placeholders.

Is this skill compatible with modern WordPress versions?

It is optimized for WordPress 6.8+ and PHP 8.0+, while ensuring compatibility with the minimum requirements of PHP 7.4.

What security vulnerabilities does this skill address?

It specifically prevents the 'Big Three' WordPress vulnerabilities: SQL Injection via prepared statements, XSS through context-aware escaping, and CSRF using nonces.

Which WordPress architecture patterns are supported?

The skill supports Simple (functional), Object-Oriented (OOP), and modern PSR-4 autoloading architectures for large-scale development.

WordPress Plugin Core

Name: WordPress Plugin Core
Author: jezweb

byjezweb

•

117

Content Management

Builds secure, standards-compliant WordPress plugins using modern architectural patterns and essential security protocols.

About

The WordPress Plugin Core skill empowers Claude to architect and develop professional-grade WordPress plugins following the latest standards for PHP 8.0+ and WordPress 6.8+. It enforces the 'Security Trinity' (Sanitization, Validation, Escaping) and provides structured implementation patterns for AJAX, REST API endpoints, and custom post types while ensuring protection against SQL injection, XSS, and CSRF vulnerabilities. This skill is ideal for developers needing to transition from simple functional scripts to robust OOP or PSR-4 architectures while maintaining strict WordPress coding standards and efficient database interactions.

Key Features

Standardized hooks for Settings API, REST API, and Custom Post Types
Comprehensive Security Trinity implementation for data sanitization and escaping
Automated cleanup procedures via uninstall.php and deactivation hooks
117 GitHub stars
Secure database interactions using $wpdb prepared statements and LIKE escaping
Architectural patterns for Simple, OOP, and PSR-4 plugin structures

Use Cases

Scaffolding a new WordPress plugin with a secure, scalable folder structure
Developing custom REST API endpoints with strict capability and nonce checks
Securing legacy plugin code against common vulnerabilities like SQLi and XSS

About

Key Features

Standardized hooks for Settings API, REST API, and Custom Post Types
Comprehensive Security Trinity implementation for data sanitization and escaping
Automated cleanup procedures via uninstall.php and deactivation hooks
117 GitHub stars
Secure database interactions using $wpdb prepared statements and LIKE escaping
Architectural patterns for Simple, OOP, and PSR-4 plugin structures

Use Cases

Scaffolding a new WordPress plugin with a secure, scalable folder structure
Developing custom REST API endpoints with strict capability and nonce checks
Securing legacy plugin code against common vulnerabilities like SQLi and XSS