Skip to content

Version 1.2.4 - Security Patch.

Choose a tag to compare

View all tags
@istefan istefan released this 07 Oct 11:35
· 3 commits to main since this release
v1.2.4
ab86cdb

Security Fix

This is a critical security update that hardens the user management endpoints.

  • Enforced Role Hierarchy: Implemented strict checks to prevent users with lower-level roles (e.g., 'Manager') from viewing, creating, or editing users with the 'Administrator' role. The API now correctly respects the WordPress role hierarchy.
  • The get_users endpoint now filters out administrator accounts for any non-admin user making a request, preventing data leakage.
Assets 2
Loading