Repository navigation
WP User Profiles 2.7.4
Require network site-management permission before changing Multisite membership or roles from the Sites profile section. Match WordPress Core's network, removal, and promotion checks for bulk site actions, and accept only existing primary sites without requiring membership. Prevent unauthorized account-status and role changes through crafted profile submissions, including role changes across networks. Preserve registered custom role slugs when saving bulk actions. Thanks to Nguyen Viet Tin for responsibly reporting the Sites issue.