WordPress.org

Make WordPress Core

Opened 3 years ago

Closed 3 years ago

#11767 closed defect (bug) (fixed)

activate_sitewide_plugin() uses insufficiently sanitized user input

Reported by: Denis-de-Bernardy Owned by: ryan
Priority: normal Milestone: 3.0
Component: Security Version: 3.0
Severity: normal Keywords: multisite
Cc:

Description

it, and the hook it's added onto, uses 

$_GET['plugin']

pretty much as is.

Change History (4)

comment:1 Denis-de-Bernardy — 3 years ago

the same for deactivate_sitewide_plugin()

comment:2 Denis-de-Bernardy — 3 years ago

the same for check_is_wpmu_plugin_on_activate()

comment:3 nacin — 3 years ago

  • Keywords multisite added

comment:4 ryan — 3 years ago

  • Resolution set to fixed
  • Status changed from new to closed

[12903]

Note: See TracTickets for help on using tickets.