← All changes | admin/class-convertkit-admin-post.php +5 -0 3.3.3 → 3.4.3 View file →

		@@ -281,8 +281,13 @@
281	281	if ( ! isset( $_POST['wp-convertkit'] ) ) {
282	282	return;
283	283	}
284	284
	285	+ // Bail if the current user cannot edit this Post.
	286	+ if ( ! current_user_can( 'edit_post', $post_id ) ) {
	287	+ return;
	288	+ }
	289	+
285	290	// Save Post's settings.
286	291	$this->save_post_settings( $post_id, wp_unslash( $_POST['wp-convertkit'] ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
287	292
288	293	}