Skip to content

Instantly share code, notes, and snippets.

@clip1492
clip1492 / favorites-hardening.php
Last active November 21, 2025 23:18
Unofficial temporary Security patch for LFI vulnerability in Favorites 2.3.6
<?php
/**
* Plugin Name: Favorites Hardening (MU)
* Description: Security hardening for the Favorites plugin — clamps the ?tab parameter in admin settings and validates public AJAX calls.
* Author: clip1492
* Version: 1.1
*/
if ( ! defined('ABSPATH') ) { exit; }