WordPress User Profile Plugin

We were reported about role validation bug during registration process. Our team reacted immediately to this report and fixed this vulnerability. If your installation is modified and you can’t update, please diff these two files from latest version:

functions/ajax.php
functions/api.php

After update check all users who have “administrator” role (make sure all admin users are authorized by you) and specify registration allowed roles in UserPro settings -> Registration settings tab. All allowed roles and default role must be specified. Please see the picture below:

Change log:

Version 4.9.21 13/03/2018
============================
– Security Fix: Registration role validation fix.

Please download the latest UserPro version from your CodeCanyon account and update plugin installation immediately.

Published by Gintare

Leave a Reply

Your email address will not be published. Required fields are marked *