Changes from trunk/src/wp-admin/includes/ajax-actions.php at r55474 to branches/6.2/src/wp-admin/includes/ajax-actions.php at r55769

File:

• branches/6.2/src/wp-admin/includes/ajax-actions.php (modified) (1 diff)

branches/6.2/src/wp-admin/includes/ajax-actions.php

@@ -2772 +2772 @@
     }
 
+    if ( false === check_ajax_referer( 'set-attachment-thumbnail', '_ajax_nonce', false ) ) {
+        wp_send_json_error();
+    }
+
     $post_ids = array();
     // For each URL, try to find its corresponding post ID.