Changeset 64179 for branches/5.1/src/wp-includes/class-oembed.php

Timestamp:

10/06/2026 05:43:00 PM (3 days ago)

Author:

johnbillion

Message:

Security: Backport the WordPress 7.1.3 security fixes to the 5.1 branch.

• REST API: Require both capabilities to change a post's sticky status.
• Query: Prevent exposure of comments on unviewable posts.
• Posts, Post Types: Fire dynamic status transition hooks only for registered statuses and post types.
• Administration: Treat contextual help tab links as selectors.
• Embeds: Remove support for Imgur oEmbeds.
• HTTP: Improve relative path resolution in WP_Http::make_absolute_url().

Merges r64127, r64128, r64130, r64131, r64132, r64133 to the 5.1 branch.

Props xknown, jeremyfelt, jorbin, peterwilsoncc, ehtis, westonruter, lancewillett, jonsurrell, marcs0h, rfaile313, johnbillion, vortfu.

Location:

branches/5.1

Files:

• . (modified) (1 prop)
• src/wp-includes/class-oembed.php (modified) (3 diffs)

branches/5.1/src/wp-includes/class-oembed.php

@@ -76 +76 @@
                         '#https?://(www\.)?instagr(\.am|am\.com)/(p|tv)/.*#i' => array( 'https://api.instagram.com/oembed', true ),
                         '#https?://(open|play)\.spotify\.com/.*#i'     => array( 'https://embed.spotify.com/oembed/', true ),
-                        '#https?://(.+\.)?imgur\.com/.*#i'             => array( 'https://api.imgur.com/oembed', true ),
                         '#https?://(www\.)?meetu(\.ps|p\.com)/.*#i'    => array( 'https://api.meetup.com/oembed', true ),
                         '#https?://(www\.)?issuu\.com/.+/docs/.+#i'    => array( 'https://issuu.com/oembed_wp', true ),
@@ -160 +159 @@
                  * | Flickr       | flic.kr                                   |      Yes       | 3.6.0   |
                  * | Spotify      | spotify.com                               |      Yes       | 3.6.0   |
-                 * | Imgur        | imgur.com                                 |      Yes       | 3.9.0   |
                  * | Meetup.com   | meetup.com                                |      Yes       | 3.9.0   |
                  * | Meetup.com   | meetu.ps                                  |      Yes       | 3.9.0   |
@@ -212 +210 @@
                  * | Photobucket  | photobucket.com      |      No        | 2.9.0     | 5.1.0     |
                  * | Funny or Die | funnyordie.com       |      Yes       | 3.0.0     | 5.1.0     |
+                 * | Imgur        | imgur.com            |      Yes       | 3.9.0     | 7.1.3     |
                  *
                  * @see wp_oembed_add_provider()