Inconsistent behaviour of redirect guess when page is private

[jamieburchell]

I have a blog post with the name "Events Cancelled Due To Coronavirus" accessible at the URL "/news/2020/03/30/events-cancelled-due-to-coronavirus/". If I create a new page with the name "Events" and URL "/events" and set it to "Private", then "/events" redirects to the blog post "/news/2020/03/30/events-cancelled-due-to-coronavirus/". If I delete the page, the redirect does not happen.

The redirect guessing code appears to check get_query_var( 'name' ) and in the case of the private events page, this value is populated with "events" whereas for a missing page or a request for the URL "/even", this is not the case.

[sukhendu2002]

Reproduction Report

Description

This report validates whether the issue can be reproduced.

Environment

• WordPress: 6.8-alpha-59274-src
• PHP: 8.2.27
• Server: nginx/1.27.3
• Database: mysqli (Server: 8.0.41 / Client: mysqlnd 8.2.27)
• Browser: Chrome 132.0.0.0
• OS: macOS
• Theme: Twenty Twenty-Five 1.0
• MU Plugins: None activated
• Plugins:
  • Test Reports 1.2.0

Actual Results

1. ✅ Error condition occurs (reproduced).

[jamieburchell]

I can also repro this with the page in "scheduled" or "draft" status

Trac ticket: https://core.trac.wordpress.org/ticket/62877