[wp-trac] [WordPress Trac] #64541: In GET requests, interfaces containing the `search` parameter can be vulnerable to logic errors triggered by the input `%2500`.
WordPress Trac
noreply at wordpress.org
Thu Jan 22 15:33:46 UTC 2026
#64541: In GET requests, interfaces containing the `search` parameter can be
vulnerable to logic errors triggered by the input `%2500`.
--------------------------+------------------------------
Reporter: nefelibata | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: REST API | Version: 6.9
Severity: major | Resolution:
Keywords: | Focuses:
--------------------------+------------------------------
Comment (by sabernhardt):
From #64542:
> Using the parameter `search="%25"` returned all results.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/64541#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list