[wp-trac] [WordPress Trac] #20195: Plugins uninstall.php

[WordPress Trac]

#20195: Plugins uninstall.php
--------------------------+------------------------------
 Reporter:  wpsmith       |       Owner:
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Plugins       |     Version:
 Severity:  major         |  Resolution:
 Keywords:  dev-feedback  |
--------------------------+------------------------------

Comment (by lightningspirit):

 As they have access to a fully loaded WordPress environment they can
 ''fully'' execute uninstall.php. That can be a security break. I think we
 should check for referer or use the nonces API too...

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20195#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software