ProfileGrid < 5.5.2 - Subscriber+ Unauthorized Data Modification

Description The plugin does not perform proper capability checks on the ‘pm_upload_csv’ function, enabling authenticated users with subscriber-level permissions or above to import new users and update existing ones.