Ultimate Member ForumWP Missing Authorization Vulnerability Allowing Access Control Misconfiguration

A missing authorization vulnerability has been identified in the Ultimate Member ForumWP plugin, specifically in versions through 2.1.4. This vulnerability allows for the exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could result in unauthorized access or actions being performed, due to the improper handling of access control security levels.