It seems that the plugin missed some permission verification on some of the function, such as admin_notices() (includes/admin.php) where it shows up error like this:
—
PHP message: PHP Notice: Undefined property: MailgunAdmin::$hook_suffix in /home/xxx/www/live/app/plugins/mailgun/includes/admin.php on line 309″ while reading response header from upstream
—
The bug was looking for $this->hook_suffix, however it was not defined because it was not executed at line 101, skipped by current_user_can('manage_options') check.
-
This topic was modified 9 years, 3 months ago by
abdusfauzi.
-
This topic was modified 9 years, 3 months ago by
abdusfauzi. Reason: Readability