Input validation vulnerability in Starter Templates by FancyWP 2.0.0

The FancyWP plugin for WordPress, called “Starter Templates”, has a security issue in all versions up to 2.0.0. This is because it does not properly check for a specific code, called a “nonce”, when performing a certain function. This means that someone who is not logged in to the website can trick the website’s administrator into doing something, like clicking on a link, which will allow them to install any plugin they want without permission.