Skip to content

6.8.9

Choose a tag to compare

@cbravobernal cbravobernal released this 12 Jun 21:25
fe9aec8

Security

  • Hardened the escaping of wp_options LIKE queries used when loading option-page meta and during taxonomy term cleanup, switching to esc_like() so option-name prefixes are always matched as literals rather than as patterns.

Fixes

  • The URL, text, textarea, and select-style fields no longer raise PHP errors when a non-scalar value (such as an array) is submitted; such input is now treated as invalid.