=Some logical flaws in Queue.php, Queue.js, ContentExecutor.php, UploadExec...

Jake Vanderwerf

2026-01-25 b38f03c0e7218762d90fa5092696b127f24f36db

 inc/rest/routes/LoginRoutes.php

@@ -110,7 +110,6 @@
   public function handleLogin(WP_REST_Request $request): WP_REST_Response
   {
      $data = $request->get_params();
      error_log('Data: '.print_r($data, true));
      // Verify Turnstile
      if (!$this->verifyTurnstile($data['cf-turnstile-response'] ?? '')) {
         return $this->error('Security verification failed', 'turnstile_failed', 403);
@@ -650,7 +649,7 @@
         }

         // Lockout expired - clear attempts
         $this->cache->delete($cache_key);
         $this->cache->forget($cache_key);
         return true;
      }

@@ -690,7 +689,7 @@
   protected function clearFailedAttempts(string $username): void
   {
      $cache_key = 'login_attempts_' . md5($username);
      $this->cache->delete($cache_key);
      $this->cache->forget($cache_key);
   }