BuddyDev Activity Plus Reloaded for BuddyPress Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the BuddyDev Activity Plus Reloaded for BuddyPress plugin, specifically in versions through 1.1.2. This vulnerability allows exploitation of improperly configured access control, potentially enabling users with lower privileges to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could lead to unauthorized access or actions being performed by users with lower privileges, bypassing intended access controls.