Ticket #24030: 24030.diff

wp-includes/pluggable.php

@@ -810 +810 @@
         $referer = strtolower(wp_get_referer());
         $result = isset($_REQUEST[$query_arg]) ? wp_verify_nonce($_REQUEST[$query_arg], $action) : false;
         if ( !$result && !(-1 == $action && strpos($referer, $adminurl) === 0) ) {
+        /**
+         * Fires when nonce verification fails.
+         *
+         * Use this action to log when an action fails due to an invalid nonce.
+         *
+         * @param string $action The action that was attempted.
+         *
+         * @since 3.9.1
+         */
+        do_action('check_admin_referer_fails', $action );
                 wp_nonce_ays($action);
                 die();
         }