Skip to content

Pull requests: Ultimate-Multisite/ultimate-multisite

New pull request New
14 Open 774 Closed
14 Open 774 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Security: DNS modal ownership check + Forge deploy-command domain validation
#1383 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: use a high-entropy random key for the security-mode disable URL external-contributor status:available Task is available for claiming
#1382 opened Jun 10, 2026 by vuckro Contributor Loading…
10
Security: escape attacker-influenced data rendered in admin views (XSS)
#1381 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Robustness: null-deref, div-by-zero and control-flow guards
#1380 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: reject unsafe manifest plugin paths during site import
#1379 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Fix: load membership and customer with the correct helpers in PayPal Express IPN
#1378 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Robustness: guard process_checkout() against missing cart and invalid gateway
#1377 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: constant-time comparison for REST API credentials
#1376 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: allow-list the model identifier in Limitations::remove_limitations
#1375 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: add a CSRF nonce to the setup/installer AJAX action external-contributor
#1374 opened Jun 10, 2026 by vuckro Contributor Loading…
2
Security: escape customer/product output in the Broadcast list table
#1373 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: enforce payment ownership in the status-polling AJAX endpoint
#1372 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: require capability checks on privileged network-admin AJAX endpoints
#1371 opened Jun 10, 2026 by vuckro Contributor Loading…
1
Security: enforce object ownership in customer-panel AJAX handlers
#1370 opened Jun 10, 2026 by vuckro Contributor Loading…
3
ProTip! Follow long discussions with comments:>50.