Directorist < 7.5.5 - Subscriber+ Arbitrary User Password Reset to Privilege Escalation

The plugin does not properly validates a user sent a valid password reset token, enabling attackers to take over other user accounts, like administrators.