Design/Logic Flaw

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations...