2
WordPress Plugin Developers Need to Make Sure There Nonce Checks Both Work if a Nonce Isn't Sent or if the Nonce is Wrong
(www.pluginvulnerabilities.com)
Discussion about WordPress security without all the falsehoods.