Security gap between UAM and Flowpaper
-
Hello,
I use WordPress 4.7.4 and the User Access Manager 2.0.8, short UAM, (https://wordpress.org/plugins/user-access-manager/) in connection with the plugin FlowPaper 1.8.4 (https: // wordpress.org/plugins/flowpaper-lite-pdf-flipbook/).
My page is freely visible to everyone (http://innerer-orient.de/test).
The PDF document only for a user role.I would have expected the page to be displayed, but it would have to give an error message, due to the user role, when loading the document.
This is not the case, the document is loaded and displayed completely.
Is this a bug of one of the plugins?
I am not sure if I can ask for help, therefore, the question in the round here.
As a beginner, I would first suspect the UAM, which does not hand over the role correctly.
Maybe someone can help me, because I think that is a security problem.Many Thanks
The topic ‘Security gap between UAM and Flowpaper’ is closed to new replies.