Skip to:
Content
Pages
Categories
Search
Top
Bottom

buddypress profile settings accessed by other members


  • matwin23
    Participant

    @matwin23

    5 years, 4 months ago

    I have just noticed this issue, dont believe it was a capability last time i checked.
    Any member can now go to another members profile and click on settings and adjust the members password, email, visibility, export data etc.
    Why is this available to other members and how do i fix?
    thanks

Viewing 2 replies - 1 through 2 (of 2 total)

  • snorklebum
    Participant

    @snorklebum

    5 years, 4 months ago

    Only accounts with administrator access should see those additional options, have you tested disabling other addons and the Twenty Nineteen theme?


    matwin23
    Participant

    @matwin23

    5 years, 4 months ago

    Found out it was WCFM causing the conflict but only when the user is subscribed as Store Vendor!

    hopefully the plugin developer can update to fix as its a massive vulnerability

    cheers

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.

Topic Info

Topic Tags

Skip to toolbar