WordPress.org

Make WordPress Core

Opened 3 years ago

Last modified 6 months ago

#38012 new defect (bug)

Improve data validation in plugin.php

Reported by: rpayne7264 Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 4.6
Component: Plugins Keywords: reporter-feedback
Focuses: Cc:
PR Number:

Description

function plugin_basename does not do proper data validation of $realdir variable before attempting to use strpos():

PHP Warning: strpos(): Empty needle in /wp-includes/plugin.php on line 736

Change History (1)

#1 @desrosj
6 months ago

  • Keywords reporter-feedback added

Hi @rpayne7264,

Are you still seeing this issue? Can you detail the situation where you are seeing this error? What steps can be taken to produce it?

Note: See TracTickets for help on using tickets.