WordPress Plugin Frontend Admin Auth Bypass

The Frontend Admin plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in versions up to 3.29.12.

Due to insufficient authorization checks, unauthenticated attackers can overwrite any user's email address, including administrators, and take over accounts.