The BuddyPress WordPress plugin, versions before 7.2.1, fixed a vulnerability that could allow a user that has just been demoted from an Administrator role to a Subscriber to add/edit/delete BuddyPress Member Types from the Administration screens introduced in the 7.0.0 release.
2021-03-17 (about 2 years ago)
2021-03-17 (about 2 years ago)
2021-03-19 (about 2 years ago)