WordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Pham Van Tam in WordPress Plugin Event Kikfyre versions = 2.1.8...