wp-security-audit

The supplied material contains intentionally vulnerable example code with SQL injection, reflected XSS, missing CSRF protection, broken access control, and unauthorized record-selection risks. The accompanying fixed version addresses those issues. The fragment itself is educational security documentation and contains no apparent malware, data exfiltration, backdoor, or obfuscation.