From 3769906833faef5d4ebeace03651d5801d0361bc Mon Sep 17 00:00:00 2001 From: John Holt Date: Thu, 29 Oct 2020 17:05:34 -0400 Subject: [PATCH] Update class-ot-meta-box.php Fix for CSRF vulnerability See report https://virusdie.com/verdicts/?id=66855 --- includes/class-ot-meta-box.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/class-ot-meta-box.php b/includes/class-ot-meta-box.php index 627abdac..a0109c8a 100755 --- a/includes/class-ot-meta-box.php +++ b/includes/class-ot-meta-box.php @@ -207,7 +207,7 @@ public function save_meta_box( $post_id, $post_object ) { global $pagenow; // Verify nonce. - if ( isset( $_POST[ $this->meta_box['id'] . '_nonce' ] ) && ! wp_verify_nonce( $_POST[ $this->meta_box['id'] . '_nonce' ], $this->meta_box['id'] ) ) { // phpcs:ignore + if ( ! isset( $_POST[ $this->meta_box['id'] . '_nonce' ] ) || ! wp_verify_nonce( $_POST[ $this->meta_box['id'] . '_nonce' ], $this->meta_box['id'] ) ) { // phpcs:ignore return $post_id; }