From 6863d1198a96f4ca7914d50a2cc831bb810b12d3 Mon Sep 17 00:00:00 2001
From: champsupertramp <heychampsupertramp@gmail.com>
Date: Fri, 17 Jun 2016 16:00:27 +0800
Subject: [PATCH] Fix nonces added to image uploads

---
 core/lib/upload/um-image-upload.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/lib/upload/um-image-upload.php b/core/lib/upload/um-image-upload.php
index 11709df3..2e7e748d 100644
--- a/core/lib/upload/um-image-upload.php
+++ b/core/lib/upload/um-image-upload.php
@@ -20,7 +20,7 @@ $nonce = $_POST['_wpnonce'];
 $ultimatemember->fields->set_id = $_POST['set_id'];
 $ultimatemember->fields->set_mode = $_POST['set_mode'];
 
-if ( ! wp_verify_nonce( $nonce, 'um_upload_nonce-'.$timestamp ) ) {
+if ( ! wp_verify_nonce( $nonce, 'um_upload_nonce-'.$timestamp ) && is_user_logged_in() ) {
     // This nonce is not valid.
     $ret['error'] = 'Invalid nonce';
     die( json_encode( $ret ) );