Access violation vulnerability in Wicked Folders 2.18.16

The Wicked Folders plugin for WordPress had a security issue that allowed people with less than administrator-level permissions to do actions that only administrators should be able to do. This security issue was present in versions up to and including 2.18.16. The problem was that the plugin was not checking to make sure that only people with the right permissions could do certain things. This allowed people with lower permissions to do things that they shouldn’t be able to do.