“Allows any authenticated user (with a role as low as subscriber) to reset Settings of the plugin.” There was also a separate Cross Site Scripting issue that was fixed. A Cross Site Scripting ...