Fatal error on empty taxonomy search
-
wonderm00ns-simple-facebook-open-graph-tags 3.3.5 will produce a fatal error on empty searches which include taxonomies.
To reproduce on a fresh WordPress installation with debug logging enabled, add a custom taxonomy and make a search that references it:
cd /var/www/html/wp-content/themes/twentytwentyfive
wp scaffold taxonomy audience > tax.php
echo 'require("tax.php");' >> functions.php
wp plugin install wonderm00ns-simple-facebook-open-graph-tags
wp plugin activate wonderm00ns-simple-facebook-open-graph-tags
curl -s "http://localhost/?s=n&audience=x" > /dev/nullWhen
is_tax()is true and$wp_query->get_queried_object();doesn’t match an object, the following logs are generated:PHP Deprecated: stripslashes(): Passing null to parameter #1 ($string) of type string is deprecated in /var/www/html/wp-content/plugins/wonderm00ns-simple-facebook-open-graph-tags/public/class-webdados-fb-open-graph-public.php on line 313
PHP Warning: Attempt to read property "taxonomy" on null in /var/www/html/wp-content/plugins/wonderm00ns-simple-facebook-open-graph-tags/public/class-webdados-fb-open-graph-public.php on line 315
PHP Warning: Attempt to read property "taxonomy" on null in /var/www/html/wp-content/plugins/wonderm00ns-simple-facebook-open-graph-tags/public/class-webdados-fb-open-graph-public.php on line 316
PHP Fatal error: Uncaught TypeError: trim(): Argument #1 ($string) must be of type string, WP_Error given in /var/www/html/wp-content/plugins/wonderm00ns-simple-facebook-open-graph-tags/public/class-webdados-fb-open-graph-public.php:651
Stack trace:
#0 /var/www/html/wp-content/plugins/wonderm00ns-simple-facebook-open-graph-tags/public/class-webdados-fb-open-graph-public.php(651): trim()
#1 /var/www/html/wp-includes/class-wp-hook.php(324): Webdados_FB_Public->insert_meta_tags()
#2 /var/www/html/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters()
#3 /var/www/html/wp-includes/plugin.php(517): WP_Hook->do_action()
#4 /var/www/html/wp-includes/general-template.php(3192): do_action()
#5 /var/www/html/wp-includes/template-canvas.php(17): wp_head()
#6 /var/www/html/wp-includes/template-loader.php(106): include('...')
#7 /var/www/html/wp-blog-header.php(19): require_once('...')
#8 /var/www/html/index.php(17): require('...')
#9 {main}
thrown in /var/www/html/wp-content/plugins/wonderm00ns-simple-facebook-open-graph-tags/public/class-webdados-fb-open-graph-public.php on line 651Note that we’re not generating these links ourselves, but I am seeing fatal errors in the logs by attackers constructing web queries, presumably attempting to trigger bugs.
Viewing 8 replies - 1 through 8 (of 8 total)
Viewing 8 replies - 1 through 8 (of 8 total)
You must be logged in to reply to this topic.