Users Can See List of All Participants – Major Flaw

  • Resolved bergencounty

    (@bergencounty)


    10 years, 8 months ago

    I have a wordpress site where if a regular user went to example.com/wp-admin and logged in, they have access to Contesthopper plugin.

    At the dashboard they can see “All Contests”, “Add New” and see all participants and even export them.

    Out of all the plugins I have installed, only Contesthopper is the one where a regular user has access to it.

    Major flaw in this plugin.

    http://wordpress.org/plugins/contesthopper/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Webikon s.r.o.

    (@webikon)

    10 years, 8 months ago

    Hello,
    thank you for the report.
    This is a serious bug that will be fixed ASAP.

    garzilla

    (@garzilla)

    10 years, 7 months ago

    Hello,

    It looks like a great plugin so far but I’ve verified this same bug as @bergencounty on my installation. Any regular user has full admin privileges over all ContestHopper contests, features and settings. It’s not really usable until this is fixed so I’m hoping you fix this soon so we can use the plugin because it looks great! Nice job so far and thanks!!!

    Cheers

    Plugin Author Webikon s.r.o.

    (@webikon)

    10 years, 7 months ago

    This issue is fixed in 0.9.5.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Users Can See List of All Participants – Major Flaw’ is closed to new replies.

Tags