diff --git a/core/lib/upload/um-file-upload.php b/core/lib/upload/um-file-upload.php
index 43bc9acf..841c3b4a 100644
--- a/core/lib/upload/um-file-upload.php
+++ b/core/lib/upload/um-file-upload.php
@@ -21,7 +21,7 @@ $timestamp = $_POST['timestamp'];
 $ultimatemember->fields->set_id = $_POST['set_id'];
 $ultimatemember->fields->set_mode = $_POST['set_mode'];
 
-if ( ! wp_verify_nonce( $nonce, 'um_upload_nonce-'.$timestamp  ) ) {
+if ( ! wp_verify_nonce( $nonce, 'um_upload_nonce-'.$timestamp  ) && is_user_logged_in() ) {
     // This nonce is not valid.
     $ret['error'] = 'Invalid nonce';
     die( json_encode( $ret ) );