Access violation vulnerability in Inactive Logout 3.2.3

The Inactive Logout plugin for WordPress allows users to automatically log out after a period of inactivity. Unfortunately, versions up to and including 3.2.2 have a vulnerability which allows authenticated attackers with subscriber-level access or higher to modify the plugin’s settings without permission. This is due to a missing capability check on the ina_reset_adv_settings() function.