WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin HAPPY versions = 1.0.9...