Skip to content

v1.8.1

Choose a tag to compare

View all tags
@ilicfilip ilicfilip released this 03 Oct 14:17
· 632 commits to main since this release
v1.8.1
67ee01a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • Security fix: Privilege escalation via an AJAX call where authenticated users could update arbitrary site options.
  • Added capability checks.
  • Thanks to NumeX for responsibly disclosing via the Patchstack Bug Bounty Program.
Assets 2
Loading