- added nonce fields;

includes/core/class-files.php

@@ -241,6 +241,8 @@ if ( ! class_exists( 'um\core\Files' ) ) {
 		 * Remove file by AJAX
 		 */
 		function ajax_remove_file() {
+			UM()->check_ajax_nonce();
+
 			/**
 			 * @var $src
 			 */
@@ -255,6 +257,8 @@ if ( ! class_exists( 'um\core\Files' ) ) {
 		 * Resize image AJAX handler
 		 */
 		function ajax_resize_image() {
+			UM()->check_ajax_nonce();
+
 			/**
 			 * @var $key
 			 * @var $src