pass nonce to verify

WordPress · Dec 11, 2024 · e2289a4 · e2289a4
1 parent 6a87370
commit e2289a4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public_html/wp-content/plugins/camptix/inc/class-camptix-badges.php b/public_html/wp-content/plugins/camptix/inc/class-camptix-badges.php
@@ -11,7 +11,7 @@
  */
 function process_badges() {
 
-	if ( ! current_user_can( 'manage_options' ) || ! wp_verify_nonce( 'badge-submission' ) ) {
+	if ( ! current_user_can( 'manage_options' ) || ! wp_verify_nonce( $_POST['_wpnonce'], 'badge-submission' ) ) {
 		return __( 'Invalid request', 'wordcamporg' );
 	}