← All changes | recurring/includes/wc-vipps-recurring.php +4 -0 6.0.4 → 6.3.1 View file →

		@@ -672,8 +672,12 @@
672	672
673	673	public function order_handle_vipps_recurring_action() {
674	674	check_ajax_referer( 'vipps_recurring_ajax_nonce', 'nonce' );
675	675
	676	+ if ( ! current_user_can( 'edit_shop_orders' ) ) {
	677	+ wp_die( -1, 403 );
	678	+ }
	679	+
676	680	$order = wc_get_order( intval( $_REQUEST['orderId'] ) );
677	681	if ( ! is_a( $order, 'WC_Order' ) ) {
678	682	return;
679	683	}