Ticket #14543: 14543.2.patch

wp-includes/default-widgets.php

@@ -567 +567 @@
                 $instance = $old_instance;
                 $instance['title'] = strip_tags($new_instance['title']);
                 $instance['number'] = (int) $new_instance['number'];
+                if( $instance['number'] < 1 || $instance['number'] > 15 )
+                        $instance['number'] = 5;
                 $this->flush_widget_cache();
 
                 $alloptions = wp_cache_get( 'alloptions', 'options' );