Vulnerable?

[Upface tech-admin]

Hello.

 

You wrote about 3.9.9 version

But:

https://patchstack.com/database/vulnerability/wplms/wordpress-wplms-theme-4-600-cross-site-request-forgery-csrf-vulnerability here is about <4.9.0

What is the real vulnerable version?

I have 4.901, should I do anything?

[Anshuman Sahu]

hi as the link said this has been fixed in 4.9 .  to fix it in 3.9.9 please add this line at the top of the import_data function : 

if(!current_user_can('manage_options') || (!empty($_POST['security']) || !wp_verify_nonce($_POST['security'],'security')))

  			die();

[Author]

Posts