Security Best Practices

  • Always use HTTPS / SSL on your site.
  • Do not expose your API secret publicly.
  • Validate callback IPs or signatures (if provided by Cryptomus).
  • Use nonce/token verification for form actions.
  • Rate-limit API endpoints to avoid abuse.
  • Regularly update the plugin and WordPress core to patch vulnerabilities.

What are your feelings

Updated on October 4, 2025