Access violation vulnerability in Ultimate WP Mail 1.3.6

A plugin called “Ultimate WP Mail” for WordPress has a security issue that allows people to gain higher level access than they should have. This happens because the plugin does not properly check if a person has the right permissions before giving them sensitive information. This means that someone with lower level access can get the password-reset link for an administrator, and then become an administrator themselves.