Access violation vulnerability in Uncanny Groups for LearnDash 6.1.0.1

The Uncanny Groups for LearnDash plugin for WordPress has a security flaw that allows attackers to gain access to admin accounts. This vulnerability affects all versions up to 6.1.0.1. The issue is caused by the plugin not properly limiting the users that a group leader can edit. This means that authenticated attackers with group leader-level access or higher can change the email address of an admin account, which could then be used to gain access to the account.