WordPress GeoDirectory plugin <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment vulnerability

Missing Authorization to Authenticated Author+ Arbitrary Image Attachment vulnerability discovered by DityaRA in WordPress Plugin GeoDirectory versions = 2.8.139...