After reading the Roles and Capabilities article I can see that the Subscriber role has read capabilities only. What capabilities (if any) would be assigned to an unauthenticated user? i.e. a website visitor browsing around but not logged-in.
2 Answers
Visitors have no capabilities. Not even the capability "read" which seems a bit odd to me.
-
1
-
A I didn't check the codex for the
read
capability. Thought it would be something like read posts. Nov 25, 2014 at 15:58 -
Every user (loggedin or visitor) has the exist
hardcoded capability.
https://developer.wordpress.org/reference/classes/wp_user/has_cap/
See line 745 in the source example.
Not logged in users have no other capabilities unless coded in a plugin or theme.