Woopra Forums » Troubleshooting » Bug Reports

Security issue: Woopra Settings

(3 posts)
  • Started 5 months ago by htan68
  • Latest reply from silverpenpub
  • This topic is not a support question
  • htan68
    Member

    I have WP 2.5.1 with Woopra plugin. My blog is a multi-user and found out that the Woopra Settings can be change by non admin users like "Contributors".

    Do you have the same issue?

    Posted 5 months ago #
  • htan68
    Member

    bump

    Posted 5 months ago #
  • This does appear to be the case. Even Subscribers have the ability to modify Woopra settings, which is quite the problem. There doesn't appear to be any way to modify permissions or security settings for different user levels.

    This definitely needs to be restricted to Contributor level or higher. Preferably, it would only be available to administrators.

    Posted 5 months ago #

RSS feed for this topic

Reply

You must log in to post.