Timeline for How can a vulnerable function can be a exploited by a non-logged user if it only called in the WP admin section of a plugin?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 4 at 23:41 | comment | added | Jean François Manatane | OK, I see. I thought this function was only called on the admin side to let the admin upload images of production options (and the PHP file that called this function would have an is_user_logged_in check at the beginning). I got it now. Thanks. | |
| Aug 4 at 23:39 | vote | accept | Jean François Manatane | ||
| Aug 4 at 15:35 | history | answered | Ja1024 | CC BY-SA 4.0 |