Commit 716e085673 for wordpress.org

commit 716e0856735658fa5a5966a9640674bc72e5a5f0
Author: johnjamesjacoby <johnjamesjacoby@git.wordpress.org>
Date:   Sat Oct 31 03:40:59 2026 +0000

    Security: Harden the random aspect of the hash used for network admin email changes.

    Replace `mt_rand()` with `wp_rand()` when generating the network admin email confirmation hash, matching the site admin and user profile email change hashes.

    Developed in: https://github.com/WordPress/wordpress-develop/pull/15267

    Props extremsx.
    Fixes #66426.

    Built from https://develop.svn.wordpress.org/trunk@65115


    git-svn-id: http://core.svn.wordpress.org/trunk@64264 1a063a9b-81f0-0310-95a4-ce76da25c4cd

diff --git a/wp-includes/ms-functions.php b/wp-includes/ms-functions.php
index b5097bca8a..17e7041b88 100644
--- a/wp-includes/ms-functions.php
+++ b/wp-includes/ms-functions.php
@@ -2806,7 +2806,7 @@ function update_network_option_new_admin_email( $old_value, $value ) {
 		return;
 	}

-	$hash            = md5( $value . time() . mt_rand() );
+	$hash            = md5( $value . time() . wp_rand() );
 	$new_admin_email = array(
 		'hash'     => $hash,
 		'newemail' => $value,
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 401521ef56..9f5da3534c 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -16,7 +16,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '7.2-beta3-65114';
+$wp_version = '7.2-beta3-65115';

 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.