Merge branch 'release/2.5.10'

Author: BracketSpaceWorker

advanced-cron-manager.php

@@ -2,7 +2,7 @@
 /**
  * Plugin Name: Advanced Cron Manager
  * Description: View, pause, remove, edit and add WP Cron events.
- * Version: 2.5.9
+ * Version: 2.5.10
  * Author: BracketSpace
  * Author URI: https://bracketspace.com
  * License: GPL3
@@ -11,7 +11,7 @@
  * @package advanced-cron-manager
  */
 
-$plugin_version = '2.5.9';
+$plugin_version = '2.5.10';
 $plugin_file    = __FILE__;
 
 /**

inc/AdminScreen.php

@@ -88,6 +88,12 @@ public function __call( $method, $args ) {
 
 		if ( strpos( $method, 'ajax_rerender_' ) !== false ) {
 
+			if ( ! current_user_can( 'manage_options' ) ) {
+				$this->ajax->error( array(
+					__( "You're not allowed to do that.", 'advanced-cron-manager' ),
+				) );
+			}
+
 			/**
 			 * From: ajax_rerender_schedules_table
 			 * To:   load_schedules_table_part

readme.txt

@@ -4,7 +4,7 @@ Tags: cron, wpcron, tool, manager, crontrol
 Requires at least: 3.6
 Requires PHP: 5.3
 Tested up to: 6.5
-Stable tag: 2.5.9
+Stable tag: 2.5.10
 License: GPLv2
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
@@ -101,6 +101,9 @@ Yes! We're offering a [custom plugin development](https://bracketspace.com/custo
 
 == Changelog ==
 
+= 2.5.10 =
+* [Fixed] Fixed security issue causing subscribers could see the schedules or events.
+
 = 2.5.9 =
 * [Fixed] Missing plugin assets in package.