Fix multisite unsubscribe by ensuring cookie constants

[javiercasares]

Summary

• ensure the WordPress cookie constants are loaded before handling the unsubscribe request
• keep the early opt-out handler compatible with multisite environments by bootstrapping default constants when needed

Testing

• vendor/bin/phpstan analyse --memory-limit=1G wpvulnerability.php (fails: reports missing symbol definitions and DOING_CRON constant usage pre-existing in repository)
• vendor/bin/phpunit (fails: WordPress test suite not installed in container)
• vendor/bin/phpcs (fails: PHPCompatibilityWP sniff not available in container)

---

https://chatgpt.com/codex/tasks/task_b_6904851c62ec83218eacb8682bec931d

[amplify-security]

🔍 Amplify code check status:  

⚠️ 0 issues detected in   📄 1 file and   ❇️ 10 lines of code   🛠️ using Opengrep

Last updated by commit 3a08242 at 2025-10-31 09:52:39 UTC.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud