current_user_can

The reported InfusedWoo Pro vulnerability highlights a dangerous WordPress authorization mistake: treating an admin-area request as proof that a user…