# Security notes

Dynamic ElementKit applies WordPress nonces and capability checks to its
administrative actions, validates the signed checkout snapshot, and restricts
the watermark upload to common image MIME types below 2 MB.

No WordPress plugin can guarantee that a site will never be infected. Keep
WordPress, WooCommerce, Elementor, the theme, PHP, and the hosting stack
updated; use least-privilege administrator accounts; enable MFA; and deploy
from the clean ZIP package. Do not install nulled plugins or themes.

If the site shows an unexpected verification page, script, redirect, or login
prompt, take a backup, put the site in maintenance mode, inspect Cloudflare
Workers/rules and WordPress `mu-plugins`, themes, uploads, and administrator
accounts, then rotate credentials from a clean device.
{"id":15,"name":"admf6pnft","url":"","description":"","link":"https:\/\/grupoelsurco.com.ar\/rrhh\/author\/admf6pnft\/","slug":"admf6pnft","avatar_urls":{"24":"https:\/\/secure.gravatar.com\/avatar\/cafdcfc7e257096d4fd3c7b43e9711999de99347e3675c210e5384b0f53250d6?s=24&d=mm&r=g","48":"https:\/\/secure.gravatar.com\/avatar\/cafdcfc7e257096d4fd3c7b43e9711999de99347e3675c210e5384b0f53250d6?s=48&d=mm&r=g","96":"https:\/\/secure.gravatar.com\/avatar\/cafdcfc7e257096d4fd3c7b43e9711999de99347e3675c210e5384b0f53250d6?s=96&d=mm&r=g"},"meta":[],"_links":{"self":[{"href":"https:\/\/grupoelsurco.com.ar\/rrhh\/wp-json\/wp\/v2\/users\/15","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grupoelsurco.com.ar\/rrhh\/wp-json\/wp\/v2\/users"}]}}