WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mdr in WordPress Plugin User Registration versions = 4.4.6...