Ticket #25435: 25435.diff

src/wp-includes/shortcodes.php

@@ -386 +386 @@
 }
 
 add_filter('the_content', 'do_shortcode', 11); // AFTER wpautop()
+
+/**
+ * Call a shortcode function by tag name.
+ *
+ * We can now avoid evil calls to do_shortcode( '[shortcode]' ).
+ *
+ * @since 3.8.0
+ *
+ * @param string $tag     The shortcode whose function to call.
+ * @param array  $atts    The attributes to pass to the shortcode function. Optional.
+ * @param array  $content The shortcode's content. Default is null.
+ *
+ * @return string|bool False on failure, the result of the shortcode on success.
+ */
+function call_shortcode_func( $tag, $atts = array(), $content = null ) {
+
+        global $shortcode_tags;
+
+        if ( ! isset( $shortcode_tags[ $tag ] ) )
+                return false;
+
+        return call_user_func( $shortcode_tags[ $tag ], $atts, $content, $tag );
+}