WordPress.org
Get WordPress

Plugin Directory

Changeset 3454513


Ignore:
Timestamp:
02/05/2026 11:02:53 AM (4 weeks ago)
Author:
israpil
Message:

added missing access control to ajax call (for Subscriber)

Location:
webtexttool/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • webtexttool/trunk/README.txt

    r3416373 r3454513  
    44Requires at least: 3.5 or higher
    55Tested up to: 6.9
    6 Stable tag: 3.6.3
     6Stable tag: 3.6.4
    77License: GPLv2 or later
    88License URI: https://www.gnu.org/licenses/gpl-2.0.html
    … …  
    8484
    8585== Changelog ==
     86
     87= 3.6.4 =
     88
     89Release Date: February 5th, 2026
     90
     91* Fix: added missing access control to ajax call (for Subscriber). Credits to @nabilirawan
    8692
    8793= 3.6.3 =

  • webtexttool/trunk/core/class-webtexttool-core.php

    r3043558 r3454513  
    735735        $output = array("message" => 'process server ajax failed'); // set default output message
    736736        $action = $this->get_webtexttoolnonce_action(); // text used to generate or check the nonce.
     737
     738        if (!current_user_can('edit_posts')) {
     739            exit;
     740        }
    737741
    738742        // check if the nonce and data exist, otherwise exit

  • webtexttool/trunk/webtexttool.php

    r3273163 r3454513  
    77 * Plugin URI:        https://www.textmetrics.com
    88 * Description:       Textmetrics is the easiest way to create SEO proof content to rank higher and get more traffic. Realtime optimization, keyword research and more.
    9  * Version:           3.6.3
     9 * Version:           3.6.4
    1010 * Author:            Textmetrics
    1111 * Author URI:        https://www.textmetrics.com
    … …  
    1616 */
    1717
    18 define('WTT_VERSION', '3.6.3');
     18define('WTT_VERSION', '3.6.4');
    1919define('WTT_SHORT_URL', "api.textmetrics.com");
    2020define('WTT_BASE_API_URL', 'https://api.textmetrics.com/');
Note: See TracChangeset for help on using the changeset viewer.