We were reported about role validation bug during registration process. Our team reacted immediately to this report and fixed this vulnerability. If your installation is modified and you can’t update, please diff these two files from latest version:
functions/ajax.php
functions/api.php
After update check all users who have “administrator” role (make sure all admin users are authorized by you) and specify registration allowed roles in UserPro settings -> Registration settings tab. All allowed roles and default role must be specified. Please see the picture below:
Change log:
Version 4.9.21 13/03/2018
============================
– Security Fix: Registration role validation fix.
Please download the latest UserPro version from your CodeCanyon account and update plugin installation immediately.
