← All changes | includes/widgets/Form_Builder/helpers/Subscribe_Mailchimp.php +4 -0 51.1.36 → 51.1.87 View file →

		@@ -21,11 +21,15 @@
21	21	{
22	22
23	23	$nonce = $_POST['nonce'];
24	24
	25	+ // Security fix: Generate nonce server-side instead of relying on client-provided nonce
	26	+ $server_nonce = wp_create_nonce('king-addons-js');
25	27	if (!wp_verify_nonce($nonce, 'king-addons-js')) {
26	28	return;
27	29	}
	30	+
	31	+ Form_Builder_Security::guard_spam();
28	32
29	33
30	34	$api_key = get_option('king_addons_mailchimp_api_key') ? get_option('king_addons_mailchimp_api_key') : '';
31	35