A note of further explanation:
After a subcriber logs in:
Previous version of plugin:
==========================
logout link from WordPress admin bar =
https://www.xxx/about-us/home/?action=logout&_wpnonce=xxxxxxxxxx
or
https://www.xxx/about-us/home/?action=logout&_wpnonce=yyyyyyyyyy
i.e. it changes per user
logout link from menu is ALWAYS the same wpnonce value:
https://www.xxx/?action=logout&_wpnonce=nnnnnnnnnn
This passes you to the “are you sure” page where the logout link is:
https://www.xxx/?action=logout&_wpnonce=xxxxxxxxxx
https://www.xxx/?action=logout&_wpnonce=yyyyyyyyyy
And the subscriber can log out.
Latest version of plugin:
=========================
logout link from WordPress admin bar =
https://www.xxx/?page_id=4766&_wpnonce=xxxxxxxxxx
logout link from menu is ALWAYS the same wpnonce value:
https://www.xxx/?action=logout&_wpnonce=nnnnnnnnnn
This passes you to the “are you sure” page where the logout link is:
https://www.xxx/?page_id=4766&_wpnonce=xxxxxxxxxx
And then the visitor gets a ‘Not found’ message within the website