10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-06-05 15:09:37 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed vulnerability if wp_capabilities has accent characters;

Browse Source
This commit is contained in:
Mykyta Synelnikov
2023-06-29 19:56:54 +03:00
parent f2f5f5818b
commit fae47c6065
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/core/class-user.php
+1 -1
View File
@@ -178,7 +178,7 @@ if ( ! class_exists( 'um\core\User' ) ) {
public function is_metakey_banned( $meta_key ) {
$is_banned = false;
foreach ( $this->banned_keys as $ban ) {
if ( is_numeric( $meta_key ) || false !== stripos( $meta_key, $ban ) ) {
if ( is_numeric( $meta_key ) || false !== stripos( $meta_key, $ban ) || false !== stripos( remove_accents( $meta_key ), $ban ) ) {
$is_banned = true;
break;
}