[wp-trac] [WordPress Trac] #37048: Unapproved comments show publicly when using custom page parameter

[WordPress Trac]

#37048: Unapproved comments show publicly when using custom page parameter
--------------------------+-----------------------------
 Reporter:  smerriman     |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Comments      |    Version:  4.4.1
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 The fix for #35175 adds code which does a manual comment query when
 wp_list_comments is called with args that don't match the main query (eg a
 page parameter).

 However, the fix queries comments with 'status=all'. This means it
 includes unapproved comments - so any theme which uses a custom page
 parameter results in all unapproved comments showing up publicly.

 This is a major issue.

 @boonebgorges

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37048>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform