Access violation vulnerability in Frontend File Manager Plugin 18.3

The Frontend File Manager plugin for WordPress is a program that allows users to manage their WordPress files. Unfortunately, a security vulnerability has been discovered in versions up to and including 18.2. This vulnerability allows unauthenticated attackers to edit the content and title of every page on the website, as the plugin does not have sufficient security protections to prevent this. Additionally, there are no checks to stop users from editing other people’s posts, and there is no security nonce on the wpfm_edit_file_title_desc AJAX action.