- Use $wpdb->prepare() with esc_like() in clear_article_cache() - Add wp_http_validate_url() SSRF prevention in download_thumbnail() - Add limit_response_size (5MB) on image downloads - Set chmod 0644 after file_put_contents() - Add transient-based concurrent fetch lock