Skip to content
BranchesTags

Latest commit

 

History

4 Commits

Folders and files

NameName
Last commit message
Last commit date
1.wp_strict_LFI.yml
1.wp_strict_LFI.yml
 
 
10.wp_detect_phpcs_ignore_wordpress_extended.yml
10.wp_detect_phpcs_ignore_wordpress_extended.yml
 
 
11.wp_extract.yml
11.wp_extract.yml
 
 
12.wp_post_role.yml
12.wp_post_role.yml
 
 
13.wp_user_register.yml
13.wp_user_register.yml
 
 
2.wp_ajax_nopriv_hooks.yml
2.wp_ajax_nopriv_hooks.yml
 
 
3.wp_xss_php_self.yml
3.wp_xss_php_self.yml
 
 
4.wp_php_ip_spoofing_user_headers.yml
4.wp_php_ip_spoofing_user_headers.yml
 
 
5.wp_random_password.yml
5.wp_random_password.yml
 
 
6.wp_admin_email.yml
6.wp_admin_email.yml
 
 
7.wp_todo-fixme-bug.yml
7.wp_todo-fixme-bug.yml
 
 
8.wp_csrf.yml
8.wp_csrf.yml
 
 
9.wp_permission_callback_return_true.yml
9.wp_permission_callback_return_true.yml
 
 
README.md
README.md
 
 

Repository files navigation

📌 WordPress Semgrep Rules

⚡ Why this matters

WordPress powers a huge portion of the web, but many plugins and themes introduce security risks.
These Semgrep rules are designed to automate security reviews and help developers catch issues early.

About

A curated collection of Semgrep rules for WordPress security auditing

Resources

Readme
Activity

Stars

0 stars

Watchers

0 watching

Forks

1 fork
Report repository

Releases

Packages

Contributors