[wp-trac] [WordPress Trac] #58181: wp_create_nonce() should not pass $action to wp_get_session_token()

WordPress Trac noreply at wordpress.org
Mon Apr 24 06:48:45 UTC 2023


#58181: wp_create_nonce() should not pass $action to wp_get_session_token()
--------------------------+--------------------
 Reporter:  dd32          |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  6.3
Component:  General       |    Version:
 Severity:  trivial       |   Keywords:
  Focuses:                |
--------------------------+--------------------
 In [54218] / #35188 `$action` was accidentally passed to
 `wp_get_session_token()`. This function doesn't accept any parameters.

 https://core.trac.wordpress.org/browser/trunk/src/wp-
 includes/pluggable.php?marks=2362#L2343

 This has no current security implications or any effect at all, as
 `wp_get_session_token()` currently takes zero parameters.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58181>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list