Security issue

  • Resolved clemorphy

    (@clemorphy)


    5 years ago

    Hi

    Any user with a basic role can go to his edit profile page and change his role to admin.
    I don’t know if this is the intended behaviour, but it can be a real security issue.

Viewing 1 replies (of 1 total)
  • Plugin Author Hossni Mubarak

    (@mhmrajib)

    5 years ago

    Thank you @clemorphy for notifying the issue.
    We have blocked it for non admin user in the latest update.
    Hope it helps.

Viewing 1 replies (of 1 total)

The topic ‘Security issue’ is closed to new replies.