WordPress.org
Get WordPress

Make WordPress Core

Opened 10 years ago

Closed 10 years ago

#37490 closed defect (bug) (fixed)

Improve capability checks in wp_ajax_update_plugin() and wp_ajax_delete_plugin()

Reported by: ocean90 Owned by: ocean90
Priority: normal Milestone: 4.6
Component: Plugins Version: 4.6
Severity: normal Keywords:
Cc: Focuses:

Description

Looking at [37714] and noticed that the cap checks for both mentioned functions can be slightly improved so they match the other Ajax handlers like wp_ajax_delete_theme() or wp_ajax_install_plugin().

Change History (1)

#1 @ocean90
10 years ago

  • Owner set to ocean90
  • Resolution → fixed
  • Status new → closed

In 38168:

Plugins: Move capability checks further up in wp_ajax_update_plugin() and wp_ajax_delete_plugin().

Add tests for both Ajax handlers.

Props Yorick Koster, swissspidy.
Fixes #37490.

Note: See TracTickets for help on using tickets.