[wp-trac] [WordPress Trac] #44041: Appearance->Themes shows update notifications based on theme NAME alone

[WordPress Trac]

#44041: Appearance->Themes shows update notifications based on theme NAME alone
----------------------------+-----------------------------
 Reporter:  scienceofspock  |      Owner:  (none)
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Themes          |    Version:  4.9.5
 Severity:  normal          |   Keywords:
  Focuses:                  |
----------------------------+-----------------------------
 My team is working on a site for a client. We have created a custom theme
 called "Inspire".

 Recently, one of our client's stakeholders was in our dev site and saw an
 "Update Available"  button on top of our custom theme in the theme page.
 WordPress proceeded to download and install a completely
 different/unrelated theme and basically destroyed the dev site. Everything
 is in Git so it's not a big deal to rebuild, but what if this had been
 live? This seems like a HUGE bug. It appears the only criteria that was
 used to display this "Update available" button was the NAME of the theme,
 and no further checks were made during the update to make sure it was the
 same theme.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44041>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform