Common WordPress Vulnerabilities and Prevention Through Secure Coding Best Practices

WordFence white paper on secure WordPress coding for plugins and themes