← All changes | src/component/class-two-fa.php +6 -1 6.2.3 → 6.3.0 View file →

		@@ -788,9 +788,14 @@
788	788	public function admin_notices() {
789	789	$screen = get_current_screen();
790	790	$screen_id = is_multisite() ? 'users-network' : 'users';
791	791
792		- if ( $screen_id !== $screen->id || ! current_user_can( 'edit_users' ) ) {
	792	+ $cap = is_multisite() ? 'manage_network_options' : 'manage_options';
	793	+ if ( $screen_id !== $screen->id || ! current_user_can( $cap ) ) {
	794	+ return;
	795	+ }
	796	+ $nonce = defender_get_data_from_request( '_wpnonce', 'g' );
	797	+ if ( ! is_string( $nonce ) || false === wp_verify_nonce( $nonce, 'bulk-users' ) ) {
793	798	return;
794	799	}
795	800	$action = defender_get_data_from_request( 'action', 'g' );
796	801	$user_id = defender_get_data_from_request( 'user', 'g' );