diff --git a/includes/admin/class-admin-functions.php b/includes/admin/class-admin-functions.php
index 78159bd4..62c65cdb 100644
--- a/includes/admin/class-admin-functions.php
+++ b/includes/admin/class-admin-functions.php
@@ -28,7 +28,7 @@ if ( ! class_exists( 'um\admin\Admin_Functions' ) ) {
 		 * @param bool $action
 		 */
 		function check_ajax_nonce( $action = false ) {
-			$nonce = isset( $_POST['nonce'] ) ? $_POST['nonce'] : '';
+			$nonce = isset( $_REQUEST['nonce'] ) ? $_REQUEST['nonce'] : '';
 			$action = empty( $action ) ? 'um-admin-nonce' : $action;
 
 			if ( ! wp_verify_nonce( $nonce, $action ) ) {
diff --git a/includes/class-functions.php b/includes/class-functions.php
index 70833825..ad1f448c 100644
--- a/includes/class-functions.php
+++ b/includes/class-functions.php
@@ -23,7 +23,7 @@ if ( ! class_exists( 'UM_Functions' ) ) {
 		 * @param bool $action
 		 */
 		function check_ajax_nonce( $action = false ) {
-			$nonce = isset( $_POST['nonce'] ) ? $_POST['nonce'] : '';
+			$nonce = isset( $_REQUEST['nonce'] ) ? $_REQUEST['nonce'] : '';
 			$action = empty( $action ) ? 'um-frontend-nonce' : $action;
 
 			if ( ! wp_verify_nonce( $nonce, $action ) ) {
diff --git a/readme.txt b/readme.txt
index ebbacc38..c3e1a6cc 100644
--- a/readme.txt
+++ b/readme.txt
@@ -152,6 +152,7 @@ The plugin works with popular caching plugins by automatically excluding Ultimat
   - Fixed admin forms esc_attr value
   - Fixed admin forms buttons wp_unslash
   - Fixed get/clean plugin upgrades on multisites
+  - Fixed verify nonce on $_GET requests
 
 * Deprecated:
   - removed "UM_TEXTDOMAIN" constant