Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Terrible mistake in Multi Users Plugin
#1
Today i found a serious security mistake in the Multi Users Plugin. After you creat a new user as a Mod with limit permission, you login by the new user account and you absolutely can delete the ADMIN account in the User management. Really terrible. I fixed it with my way. But you guys can find and fix it in your way. Hope the core team solve this problem when integrate the plugin in new core.

Btw, when new version of 3.4 will be released? I am exciting to see what new.

Thank you
Reply


Messages In This Thread
Terrible mistake in Multi Users Plugin - by nguyentriquang - 2021-02-25, 03:31:09



Users browsing this thread: 1 Guest(s)