Context Navigation

Changeset 3281235

Timestamp:

04/24/2025 07:20:00 PM (8 months ago)

Author:

devloper00

Message:

Fix vulnérability

Location:

media-library-downloader/trunk

Files:

-                      r2796173
+                      r3281235
             // Prevent non authorized user to make action
+            if ( !is_user_logged_in() && !is_admin() ) :
+                return;
+            if ( !current_user_can('upload_files') ) :
+                wp_send_json_error('Unauthorized access', 403);
+                wp_die();
             endif;

-                      r3226210
+                      r3281235
  * Plugin URI:        https://wordpress.org/plugins/media-library-downloader/
  * Description:       Download multiple media library files in one click !
  * Version:           1.3.1
+ * Version:           1.3.2
  * Tags:              library, media, files, download, downloader, WordPress
  * Requires at least: 5.0 or higher
  * Requires PHP:      5.6
  * Tested up to:      6.6.1
  * Stable tag:        1.3.1
+ * Stable tag:        1.3.2
  * Author:            M . Code
  * License:           GPL v2 or later

-                      r3141339
+                      r3281235
 == Changelog ==
+= 1.3.2 =
+* Fix vulnerabilities regarding access control
 = 1.3.1 =
 * Fix bug where download button where disabled

Note: See TracChangeset for help on using the changeset viewer.