[wp-trac] [WordPress Trac] #38682: Unauthorized plugin install

WordPress Trac noreply at wordpress.org
Sat Nov 5 17:09:31 UTC 2016


#38682: Unauthorized plugin install
--------------------------+-----------------------------
 Reporter:  tazotodua     |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 I have noticed, that in MS sub-site a plugin can be installed and
 activated (however, plugin instalaltion should be only allowed from MS
 dashboard).

 Some themes require additional "required plugins" to be installed. That is
 visible in SUB-SITE menu too:

 [[Image(http://i.imgur.com/Gli1gYy.png)]]

 so, while superadmin is there, plugins can be installed from there too.
 I think, that it should not be allowed from there. There should be message
 (after user clicks "INSTALL PLUGINS" sub-menu):  Please install it from MS
 dashboard.. (or smth like this)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38682>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list