Ticket #11922: 11922-stop-gap.patch

branches/2.9/wp-admin/includes/plugin.php

@@ -591 +591 @@
         $admin_page_hooks[$file] = sanitize_title( $menu_title );
 
         $hookname = get_plugin_page_hookname( $file, '' );
-        if (!empty ( $function ) && !empty ( $hookname ))
+        if (!empty ( $function ) && !empty ( $hookname ) && current_user_can( $access_level ))
                 add_action( $hookname, $function );
 
         if ( empty($icon_url) ) {