Plugin is blocking access to users without manage_options capability

  • Resolved azlewa

    (@azlewa)


    1 year, 2 months ago

    Plugin is blocking access to /wp-admin/profile.php and /wp-admin/ in general to users without manage_options capability (e.g. Authors, Contributors etc.)

    Perhaps related to the vulnerability fix:
    https://ww.wp.xz.cn/support/topic/vulnerability-in-all-versions/

    $this->loader->add_action( 'admin_menu', $plugin_admin, 'display_admin_page' );

    public function display_admin_page(){
    if (!current_user_can('manage_options')) {
    wp_die(esc_html__('You do not have sufficient permissions to access this page.'));
    }

Viewing 3 replies - 1 through 3 (of 3 total)
  • Martin

    (@martinpwph)

    1 year, 1 month ago

    This just started happening to one of my shop managers also. Weird thing is that it only started a day ago, the plugin has remained same version for last 2 months

    Plugin Author nicunarcisbodea

    (@nicunarcisbodea)

    1 year ago

    Fixed in version 2.1.1 !
    = 2.1.1 – 2024-15-01 =

    • Critical Fix: Users without manage_options capability (e.g., Authors, Contributors, Editors) can now properly
      access their profile page (/wp-admin/profile.php) and other admin areas
    • Fix: Moved permission check from display_admin_page() to showPage() method to prevent global admin access
      blocking
    • Security: Settings page remains properly protected – only administrators can access Square Thumbnails options
    • Addresses reported issue: “Plugin is blocking access to /wp-admin/profile.php and /wp-admin/ in general to
      users without manage_options capability”
    Plugin Author nicunarcisbodea

    (@nicunarcisbodea)

    1 year ago

    Resolved!

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Plugin is blocking access to users without manage_options capability’ is closed to new replies.