Users Cannot Update Profiles Due to Security Error After Plugin Update to 2.7.0

Hello everyone,

After updating the plugin to version 2.7.0, the database update completed successfully, but I encountered an issue: users are no longer able to update their profiles. When they click the ‘Save’ button, an error message appears: “This is not possible for security reasons.”

Troubleshooting steps I’ve tried:

• I deactivated all other plugins, but this didn’t resolve the issue.
• I also confirmed that I don’t have the reCAPTCHA plugin installed.
• I also added header("Cache-Control: no-cache"); to the template profile.php to prevent caching, but the error persists.

Error details: The error seems to be triggered by the um_profile_validate_nonce function via the um_submit_form_errors_hook__profile hook because the profile_nonce variable is missing from the submitted data. Here’s the code of the function causing the error:

function um_profile_validate_nonce( $submitted_data ) {
$user_id = isset( $submitted_data['user_id'] ) ? $submitted_data['user_id'] : '';
$nonce = isset( $submitted_data['profile_nonce'] ) ? $submitted_data['profile_nonce'] : '';
if ( empty( $nonce ) || ! wp_verify_nonce( $nonce, 'um-profile-nonce' . $user_id ) ) {
wp_die( esc_html__( 'This is not possible for security reasons.', 'ultimate-member' ) );
}
}

add_action( 'um_submit_form_errors_hook__profile', 'um_profile_validate_nonce', 1 );

Could anyone help me understand how to restore the ability for users to update their profiles?

Thanks in advance for any insights!

• This topic was modified 2 weeks, 1 day ago by brening.
• This topic was modified 2 weeks, 1 day ago by brening.