WordPress Nonce

A WordPress nonce is a time-limited token used to help verify that a request originated from the expected site context. It helps defend against cross-site request forgery but is not a single-use cryptographic nonce. Verify it together with user capabilities and object ownership. Possession of a valid nonce alone does not authorize deletion or account changes.