wordpress-plugin-core

Installation
Summary

Secure WordPress plugin development with hooks, database interactions, Settings API, custom post types, and REST API.

  • Covers three architecture patterns (Simple, OOP, PSR-4) plus the Security Trinity (sanitize input, validate logic, escape output) with 29 documented vulnerability prevention patterns
  • Includes critical security foundations: unique prefixes, ABSPATH checks, nonce verification, prepared statements, and capability checks with real 2025-2026 CVE examples
  • Addresses WordPress 6.7-6.9 breaking changes: bcrypt password hashing migration, WP_Dependencies deprecation, translation loading timing, and REST API permission callback requirements
  • Provides patterns for custom post types, taxonomies, meta boxes, Settings API, REST endpoints, and AJAX with performance comparisons (REST API 10x faster than admin-ajax.php)
SKILL.md

WordPress Plugin Development (Core)

Last Updated: 2026-01-21 Latest Versions: WordPress 6.9+ (Dec 2, 2025), PHP 8.0+ recommended, PHP 8.5 compatible Dependencies: None (WordPress 5.9+, PHP 7.4+ minimum)


Quick Start

Architecture Patterns: Simple (functions only, <5 functions) | OOP (medium plugins) | PSR-4 (modern/large, recommended 2025+)

Plugin Header (only Plugin Name required):

<?php
/**
 * Plugin Name: My Plugin
 * Version: 1.0.0
 * Requires at least: 5.9
Related skills
Installs
566
GitHub Stars
776
First Seen
Jan 20, 2026