# Security notes

Dynamic ElementKit applies WordPress nonces and capability checks to its
administrative actions, validates the signed checkout snapshot, and restricts
the watermark upload to common image MIME types below 2 MB.

No WordPress plugin can guarantee that a site will never be infected. Keep
WordPress, WooCommerce, Elementor, the theme, PHP, and the hosting stack
updated; use least-privilege administrator accounts; enable MFA; and deploy
from the clean ZIP package. Do not install nulled plugins or themes.

If the site shows an unexpected verification page, script, redirect, or login
prompt, take a backup, put the site in maintenance mode, inspect Cloudflare
Workers/rules and WordPress `mu-plugins`, themes, uploads, and administrator
accounts, then rotate credentials from a clean device.
{"id":3,"name":"adm5nklb6","url":"","description":"","link":"https:\/\/grupoelsurco.com.ar\/rrhh\/author\/adm5nklb6\/","slug":"adm5nklb6","avatar_urls":{"24":"https:\/\/secure.gravatar.com\/avatar\/398b9dd59f1ced142ae26d0c80486ef77afebb7228fe1f38668b7e9095a169c1?s=24&d=mm&r=g","48":"https:\/\/secure.gravatar.com\/avatar\/398b9dd59f1ced142ae26d0c80486ef77afebb7228fe1f38668b7e9095a169c1?s=48&d=mm&r=g","96":"https:\/\/secure.gravatar.com\/avatar\/398b9dd59f1ced142ae26d0c80486ef77afebb7228fe1f38668b7e9095a169c1?s=96&d=mm&r=g"},"meta":[],"_links":{"self":[{"href":"https:\/\/grupoelsurco.com.ar\/rrhh\/wp-json\/wp\/v2\/users\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grupoelsurco.com.ar\/rrhh\/wp-json\/wp\/v2\/users"}]}}