diff --git a/wp-admin/plugins.php b/wp-admin/plugins.php index ae5ea58c50..8fca84adf1 100644 --- a/wp-admin/plugins.php +++ b/wp-admin/plugins.php @@ -246,6 +246,14 @@ if ( $action ) { exit; } + // Bail on all if any paths are invalid. + // validate_file() returns truthy for invalid files + $invalid_plugin_files = array_filter( $plugins, 'validate_file' ); + if ( $invalid_plugin_files ) { + wp_redirect( self_admin_url("plugins.php?plugin_status=$status&paged=$page&s=$s") ); + exit; + } + include(ABSPATH . 'wp-admin/update.php'); $parent_file = 'plugins.php'; diff --git a/wp-includes/version.php b/wp-includes/version.php index 6d8df82197..69826977f6 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -4,7 +4,7 @@ * * @global string $wp_version */ -$wp_version = '4.7.3-RC1-40161'; +$wp_version = '4.7.3-RC1-40170'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.