Changeset 61884

Timestamp:

03/10/2026 12:36:43 PM (3 days ago)

Author:

johnbillion

Message:

Media: Ensure the attachment parent is accessible to the user before showing a link to it in the media manager.

Props johnbillion, peterwilsoncc.

File:

• trunk/src/wp-includes/media.php (modified) (1 diff)

trunk/src/wp-includes/media.php

@@ -4569 +4569 @@
     if ( $attachment->post_parent ) {
         $post_parent = get_post( $attachment->post_parent );
-        if ( $post_parent ) {
+        if ( $post_parent && current_user_can( 'read_post', $attachment->post_parent ) ) {
             $response['uploadedToTitle'] = $post_parent->post_title ? $post_parent->post_title : __( '(no title)' );
             $response['uploadedToLink']  = get_edit_post_link( $attachment->post_parent, 'raw' );