Skip to content

Instantly share code, notes, and snippets.

@gnanet
Created November 16, 2025 01:34
Show Gist options
  • Select an option

  • Save gnanet/6905b30e2cdecb507fd57ffdc2a41ee3 to your computer and use it in GitHub Desktop.

Select an option

Save gnanet/6905b30e2cdecb507fd57ffdc2a41ee3 to your computer and use it in GitHub Desktop.
Un-official quickfix for WooCommerce Store Toolkit v 2.4.3 to CVE-2025-60204
--- includes/admin.php 2025-10-02 02:43:04.849905709 +0200
+++ includes/admin.php 2025-11-16 02:10:11.067950299 +0100
@@ -625,6 +625,8 @@
$tab = 'overview';
}
+ $tabs = array( 'overview', 'nuke', 'post_types', 'quick-enhancements', 'settings', 'growth-tools', 'tools' );
+
switch ( $tab ) {
case 'overview':
// Required data for Sales Snapshot widget.
@@ -763,7 +765,7 @@
break;
}
- if ( $tab ) {
+ if ( ( $tab ) && in_array($tab, $tabs) ) {
if ( file_exists( WOO_ST_PATH . 'templates/admin/tabs-' . $tab . '.php' ) ) {
include_once WOO_ST_PATH . 'templates/admin/tabs-' . $tab . '.php';
} else {
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment