WordPress BuddyPress plugin <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal vulnerability

Authenticated Subscriber+ Directory Traversal vulnerability discovered by Domons in WordPress Plugin BuddyPress versions = 14.1.0...