When our cache clearing AJAX action runs, check if the current user h…

…as proper permissions
10up · Nov 6, 2024 · dde07df · dde07df
1 parent 53b5f53
commit dde07df
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/includes/class-simple-local-avatars.php b/includes/class-simple-local-avatars.php
@@ -1388,6 +1388,13 @@ public function admin_body_class( $classes ) {
 	 */
 	public function sla_clear_user_cache() {
 		check_ajax_referer( 'sla_clear_cache_nonce', 'nonce' );
+
+		// Ensure this was run by a user with proper privileges.
+		if ( ! current_user_can( 'manage_options' ) ) {
+			// Match what `check_ajax_referer` does.
+			wp_die( -1, 403 );
+		}
+
 		$step = isset( $_REQUEST['step'] ) ? intval( $_REQUEST['step'] ) : 1;
 
 		// Setup defaults.