Ticket #41445: 41445.3.diff

src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php

@@ -1525 +1525 @@
                         return false;
                 }
 
+                // Accounts for attachments with an inherit status on trashed and deleted parents.
+                $post_status = get_post_status( $post );
+
                 // Is the post readable?
-                if ( 'publish' === $post->post_status || current_user_can( 'read_post', $post->ID ) ) {
+                if ( 'publish' === $post_status || current_user_can( 'read_post', $post->ID ) ) {
                         return true;
                 }
 
-                $post_status_obj = get_post_status_object( $post->post_status );
+                $post_status_obj = get_post_status_object( $post_status );
                 if ( $post_status_obj && $post_status_obj->public ) {
                         return true;
                 }
 
                 // Can we read the parent if we're inheriting?
-                if ( 'inherit' === $post->post_status && $post->post_parent > 0 ) {
+                if ( 'inherit' === $post_status && $post->post_parent > 0 ) {
                         $parent = get_post( $post->post_parent );
                         if ( $parent ) {
                                 return $this->check_read_permission( $parent );
@@ -1547 +1550 @@
                  * If there isn't a parent, but the status is set to inherit, assume
                  * it's published (as per get_post_status()).
                  */
-                if ( 'inherit' === $post->post_status ) {
+                if ( 'inherit' === $post_status ) {
                         return true;
                 }