security lack with ultimate member profil

  • Resolved docbt

    (@docbt)


    5 years, 4 months ago

    Hi,

    I am able to view and DELETE! wpforo subscriptions as guest in the ultimate member subscription tab (?profiletab=foro&subnav=subscriptions)

    The permission to view subscriptions is permitted for guests and members – only admins and moderators are allowed to view them.

    How can I solve this problem?

    Greetings
    doc

    EDIT: It′s also possible to see Likes of private threads/boards (as guest) with a preview of the post!

    • This topic was modified 5 years, 4 months ago by docbt.
Viewing 4 replies - 1 through 4 (of 4 total)
Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘security lack with ultimate member profil’ is closed to new replies.