[wp-trac] [WordPress Trac] #65048: wp_ajax_fetch_list(): Sanitize $_GET input before nonce construction

WordPress Trac noreply at wordpress.org
Mon Apr 20 18:17:54 UTC 2026


#65048: wp_ajax_fetch_list(): Sanitize $_GET input before nonce construction
-------------------------------------+------------------------------
 Reporter:  rajeshcp                 |       Owner:  rajeshcp
     Type:  defect (bug)             |      Status:  assigned
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Administration           |     Version:  3.1
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+------------------------------

Comment (by westonruter):

 See also: [https://make.wordpress.org/core/handbook/reporting-security-
 vulnerabilities/ Reporting Security Vulnerabilities]

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/65048#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list