WordPress.org
Get WordPress

Make WordPress Core

Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#48895 closed defect (bug) (duplicate)

Anyone is able to access wp-admin to update the database when I update the core using wp-cli.

Reported by: ixkaito Owned by:
Priority: normal Milestone:
Component: Database Version:
Severity: normal Keywords:
Cc: Focuses: administration

Description

If I updated the core which requires database update via wp-cli, anyone would be able to access ​https://example.com/wp-admin/ to update the database without login.

Change History (3)

#1 @dkarfa
7 years ago

Hi @ixkaito,
Can you give more context about it?
Thx

#2 @jeremyfelt
7 years ago

  • Component Security → Database
  • Keywords needs-patch removed
  • Milestone Awaiting Review
  • Resolution → duplicate
  • Status new → closed

Hi @ixkaito, thanks for opening a ticket.

I'm going to close this as a duplicate of #3901, as this is working as expected/designed and is not a security issue. Please see previous discussions on #3901 and #34200 for more background on the decision.

#3 @ixkaito
7 years ago

Thank you @jeremyfelt . I got it.

Note: See TracTickets for help on using tickets.