WordPress Connector to CiviCRM with CiviMcRestFace plugin <= 1.0.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Connector to CiviCRM with CiviMcRestFace versions = 1.0.10...