Security Issue?

  • Resolved laura.lee

    (@lauralee-1)


    8 years, 1 month ago

    Hello,

    I am using the most updated WordPress. I logged in as a subscriber. The PageSpeed appeared on the upper menu bar area. I could click and see CSS to download. It appeared a subscriber could have full access to everything on the plugin.

    Admin Editor Pro I have on another site. I could control that way if a subscriber has access.

    I just didn’t know if this is a security issue. So I deactivated the plugin for now and wanted to let you know.

    Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)
  • andyp10

    (@andyp10)

    You can turn this off in settings

    WP Admin
    Performance
    Above The Fold
    Settings Tab

    Plugin Author optimalisatie

    (@optimalisatie)

    Hi laura.lee!

    Thank you for your bug report!

    Although the menu is visible to regular users, the access to settings pages should be denied. The access is restricted based on the WordPress check current_user_can('manage_options').

    The menu will be improved in the next update of the plugin.

    If you require additional support, please post your question on Github:

    https://github.com/optimalisatie/above-the-fold-optimization/issues

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Security Issue?’ is closed to new replies.