Copy & Delete Posts < 1.5.8 - Authenticated Plugin Settings and Access Control Modification

Description

The plugin does not perform a capability check when saving its global settings, relying only on its own role-access list, which allows users of any role an administrator has given plugin access to, as low as Subscriber, to overwrite those settings, including the role-access list itself.