Disallow text string handling as a parameter p

WordPress · Oct 17, 2023 · d4436ce · d4436ce
1 parent 12dc9ca
commit d4436ce
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/wp-includes/class-wp-query.php b/src/wp-includes/class-wp-query.php
@@ -807,7 +807,7 @@ public function parse_query( $query = '' ) {
 			$this->is_favicon = true;
 		}
 
-		if ( ! is_scalar( $qv['p'] ) || (int) $qv['p'] < 0 ) {
+		if ( ! is_numeric( $qv['p'] ) || (int) $qv['p'] < 0 ) {
 			$qv['p']     = 0;
 			$qv['error'] = '404';
 		} else {