“recent topics” widget shows private topic titles even for non-group members
I’m running a website with two private groups, and I’ve run into a snag. It turns out that all logged in users can also see topics posted into private forums in the “recent topics” widget, even if they are not member of a private group. Naturally if they click on these topics, they cannot see the contents of the thread, but the topic titles occasionally do leak information that they shouldn’t be able to see.
Is this a known bug with the bbpress “recent topics” widget? Is there a way of fixing this?
I’m running wordpress 4.7.2, buddypress 2.7.4, and bbpress 2.5.12 (also jetpack, askimet, and wordfence, at their latest versions). Happy to provide more information if need be.
Thanks in advance for any help!
- You must be logged in to reply to this topic.