WordPress BoomBox Theme Extensions plugin <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password vulnerability

Authenticated Subscriber+ Privilege Escalation via Password Reset/Account Takeover in boomboxajaxresetpassword vulnerability discovered by Tonn in WordPress Plugin BoomBox Theme Extensions versions = 1.8.0...