From 8ce92293a14e52361707b1edaa1ea789ba39c431 Mon Sep 17 00:00:00 2001 From: Phil Banks Date: Mon, 15 Feb 2021 12:14:21 +0000 Subject: [PATCH] wp_slash $old_user_data->user_email in wp_insert_user --- src/wp-includes/user.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/wp-includes/user.php b/src/wp-includes/user.php index 5c6db55afb..4496c7ec39 100644 --- a/src/wp-includes/user.php +++ b/src/wp-includes/user.php @@ -1757,6 +1757,9 @@ function wp_insert_user( $userdata ) { return new WP_Error( 'invalid_user_id', __( 'Invalid user ID.' ) ); } + // Prevent failures in comparisons later. + $old_user_data->user_email = wp_slash( $old_user_data->user_email ); + // Hashed in wp_update_user(), plaintext if called directly. $user_pass = ! empty( $userdata['user_pass'] ) ? $userdata['user_pass'] : $old_user_data->user_pass; } else { -- 2.24.3 (Apple Git-128)