WordPress Zass plugin <= 3.9.9.10 - Missing Authorization to Authenticated (Subscriber+) Demo Import vulnerability

Missing Authorization to Authenticated Subscriber+ Demo Import vulnerability discovered by Lucio Sá in WordPress Theme Zass versions = 3.9.9.10...