Fix nonce security issue

weDevsOfficial · Aug 25, 2020 · 1c173bd · 1c173bd
1 parent 3e90818
commit 1c173bd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/core/Upgrades/Upgrade.php b/core/Upgrades/Upgrade.php
@@ -178,11 +178,11 @@ public function show_update_notice() {
      */
     public function do_updates() {
 
-        if ( isset( $_POST['pm_nonce'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['pm_nonce'] ) ), '_nonce' ) ) {
+        if ( empty( $_POST['pm_nonce'] ) ) {
             return;
         }
 
-        if ( ! isset( $_POST['pm_update'] ) ) {
+        if ( ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['pm_nonce'] ) ), '_nonce' ) ) {
             return;
         }