A security issue was introduced with phpBB 3.07 which allowed users to bypass permission settings if any of the following conditions were met: Feeds are enabled Any of the posts or topics feeds are enabled The unauthorised user – or one of the groups they are a member of – have forum permissions set on [...]