From 907ac38a76b882b24acb5654eca86e31f3f66ca6 Mon Sep 17 00:00:00 2001 From: Champ Camba Date: Wed, 2 Nov 2022 12:33:22 +0800 Subject: [PATCH] Add validation for upgrade package --- includes/admin/core/class-admin-upgrade.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/admin/core/class-admin-upgrade.php b/includes/admin/core/class-admin-upgrade.php index e6d0c39c..0fca265c 100644 --- a/includes/admin/core/class-admin-upgrade.php +++ b/includes/admin/core/class-admin-upgrade.php @@ -67,7 +67,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Upgrade' ) ) { if ( ! empty( $this->necessary_packages ) ) { add_action( 'admin_menu', array( $this, 'admin_menu' ), 0 ); - if ( defined( 'DOING_AJAX' ) && DOING_AJAX ) { + if ( defined( 'DOING_AJAX' ) && DOING_AJAX && current_user_can("manage_options") ) { $this->init_packages_ajax(); add_action( 'wp_ajax_um_run_package', array( $this, 'ajax_run_package' ) );