diff -r 7b1b88e27a20 -r 48c4eec2b7e6 wp/wp-admin/options-head.php
--- a/wp/wp-admin/options-head.php	Thu Sep 29 08:06:27 2022 +0200
+++ b/wp/wp-admin/options-head.php	Fri Sep 05 18:40:08 2025 +0200
@@ -8,7 +8,7 @@
  * @subpackage Administration
  */
 
-wp_reset_vars( array( 'action' ) );
+$action = ! empty( $_REQUEST['action'] ) ? sanitize_text_field( $_REQUEST['action'] ) : '';
 
 if ( isset( $_GET['updated'] ) && isset( $_GET['page'] ) ) {
 	// For back-compat with plugins that don't use the Settings API and just set updated=1 in the redirect.