Do you have your wordpress installed on another port other than 80? If so, the problem might be with the nonce verification. I was receiving the wrong requested url and when used returned a false validation. The problem is it uses $_SERVER[‘HTTP_HOST’] which gives something like this ‘192.168.1.50:8080’ concatenated with $_SERVER[‘SERVER_PORT’] (‘8080’). The verification should be, instead using $_SERVER[‘SERVER_NAME’] (e.g. ‘192.168.1.50’) concatenated with $_SERVER[‘SERVER_PORT’] (‘8080’) to succeed.