[XB] Change Attachment Name [Paid] 2.0.6 Patch Level 4

[Levina]

@Painbaker

I just found out that not only can logged in members change other people's filenames, but guests can too as they have an active "Rename Attachment" button in the Media Gallery. I disabled the add-on and will install an earlier version.

 

[Painbaker]

Painbaker updated [XB] Change Attachment Name with a new update entry:

2.0.6 Patch Level 4

Fixed invalid permission check condition allowing guests to rename media gallery attachments

Read the rest of this update entry...

 

[Painbaker]

@Painbaker

I just found out that not only can logged in members change other people's filenames, but guests can too as they have an active "Rename Attachment" button in the Media Gallery. I disabled the add-on and will install an earlier version.

thanks for reporting this
fixed in the latest patch

 

[Levina]

thanks for reporting this
fixed in the latest patch

I found out accidentally when I looked into why some media items weren't indexed by Google and saw "rename attachment" in the URL. I think my heart stopped for a moment. Thanks for the quick fix.