Leyka < 3.30.3 - Subscriber+ Privilege Escalation

The plugin does not validate password to be updated, allowing any authenticated user, such as subscriber to set the password of another user.