clip1492

clip1492 / favorites-hardening.php

Last active January 23, 2026 14:06

Unofficial temporary Security patch for LFI vulnerability in Favorites 2.3.6

	<?php
	/**
	* Plugin Name: Favorites Hardening (MU)
	* Description: Security hardening for the Favorites plugin — clamps the ?tab parameter in admin settings and validates public AJAX calls.
	* Author: clip1492
	* Version: 1.1
	*/

	if ( ! defined('ABSPATH') ) { exit; }