WordPress.org
Get WordPress

Make WordPress Core

Opened 15 years ago

Closed 15 years ago

#11767 closed defect (bug) (fixed)

activate_sitewide_plugin() uses insufficiently sanitized user input

Reported by: denis-de-bernardy's profile Denis-de-Bernardy Owned by: ryan's profile ryan
Milestone: 3.0 Priority: normal
Severity: normal Version: 3.0
Component: Security Keywords:
Focuses: multisite Cc:

Description

it, and the hook it's added onto, uses 

$_GET['plugin']

pretty much as is.

Change History (4)

#1 @Denis-de-Bernardy
15 years ago

the same for deactivate_sitewide_plugin()

#2 @Denis-de-Bernardy
15 years ago

the same for check_is_wpmu_plugin_on_activate()

#3 @nacin
15 years ago

  • Keywords multisite added

#4 @ryan
15 years ago

  • Resolution set to fixed
  • Status changed from new to closed

[12903]

Note: See TracTickets for help on using tickets.