jakobbouchard / hestia-nginx-cache

Hestia Nginx Cache Integration for WordPress.
https://wordpress.org/plugins/hestia-nginx-cache/
GNU General Public License v3.0
11 stars 4 forks source link

Low privilege users can clear cache #8

Closed jaapmarcus closed 2 years ago

jaapmarcus commented 2 years ago

Manual clear cache button can be abused if subscribers have access to the wp admin page to manage their profiles for example. To prevent users abusing the cache purge function an potentially causing extra load the button should be removed