WordPress.org
Get WordPress

Make WordPress Core

Opened 17 years ago

Closed 17 years ago

#11767 closed defect (bug) (fixed)

activate_sitewide_plugin() uses insufficiently sanitized user input

Reported by: Denis-de-Bernardy Owned by: ryan
Priority: normal Milestone: 3.0
Component: Security Version: 3.0
Severity: normal Keywords:
Cc: Focuses: multisite

Description

it, and the hook it's added onto, uses 

$_GET['plugin']

pretty much as is.

Change History (4)

#1 @Denis-de-Bernardy
17 years ago

the same for deactivate_sitewide_plugin()

#2 @Denis-de-Bernardy
17 years ago

the same for check_is_wpmu_plugin_on_activate()

#3 @nacin
17 years ago

  • Keywords multisite added

#4 @ryan
17 years ago

  • Resolution → fixed
  • Status new → closed

[12903]

Note: See TracTickets for help on using tickets.