Unauthorised Changes Due To Missing Permission Checks

favorite plugin is vulnerable to unauthorized changes. The users can easily set other user’s favorite status since it fails to validate the authorization of a user to writes other user’s favorite status.