Changes from tags/6.2/src/wp-admin/includes/ajax-actions.php at r55816 to tags/6.2.1/src/wp-admin/includes/ajax-actions.php at r55816

File:

• tags/6.2.1/src/wp-admin/includes/ajax-actions.php (modified) (1 diff)

tags/6.2.1/src/wp-admin/includes/ajax-actions.php

@@ -2772 +2772 @@
     }
 
+    if ( false === check_ajax_referer( 'set-attachment-thumbnail', '_ajax_nonce', false ) ) {
+        wp_send_json_error();
+    }
+
     $post_ids = array();
     // For each URL, try to find its corresponding post ID.