Access violation vulnerability in Flynax Bridge 2.2.0

A plugin called Flynax Bridge for WordPress has a security issue where someone can gain more power by taking over someone else’s account. This happens because the plugin doesn’t check if the person trying to update their email is actually that person. This means that someone who isn’t logged in can change anyone’s email, even an administrator’s, and then use that to change the password and get into the account.