From 5a79e2a809759f89f5ffedd92c66394ee1735ec5 Mon Sep 17 00:00:00 2001 From: Mike Jolley Date: Tue, 11 Feb 2014 13:38:53 +0000 Subject: [PATCH] verify_nonce should check if variable isset(). Closes #4704 --- woocommerce.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/woocommerce.php b/woocommerce.php index 8b15d7590f9..5830cfd6190 100644 --- a/woocommerce.php +++ b/woocommerce.php @@ -696,6 +696,9 @@ final class WooCommerce { */ public function verify_nonce( $action, $method = '_POST', $error_message = false ) { _deprecated_function( 'Woocommerce->verify_nonce', '2.1', 'wp_verify_nonce' ); + if ( ! isset( $method[ '_wpnonce' ] ) ) { + return false; + } return wp_verify_nonce( $method[ '_wpnonce' ], 'woocommerce-' . $action ); }