Ticket #23033: 23033.1.patch

wp-includes/meta.php

@@ -738 +738 @@
                         $meta_key = isset( $q['key'] ) ? trim( $q['key'] ) : '';
                         $meta_type = isset( $q['type'] ) ? strtoupper( $q['type'] ) : 'CHAR';
 
+                        // Meta type validation
                         if ( 'NUMERIC' == $meta_type )
                                 $meta_type = 'SIGNED';
-                        elseif ( ! in_array( $meta_type, array( 'BINARY', 'CHAR', 'DATE', 'DATETIME', 'DECIMAL', 'SIGNED', 'TIME', 'UNSIGNED' ) ) )
+                        elseif ( ! preg_match( '/^(?:BINARY|CHAR|DATE|DATETIME|SIGNED|UNSIGNED|TIME|DECIMAL(?:\(\d+(?:,\s*\d+)?\))?)$/', $meta_type ) )
                                 $meta_type = 'CHAR';
 
                         $meta_value = isset( $q['value'] ) ? $q['value'] : null;