miniOrange Discord Integration <= 2.1.5 is vulnerable to Authenticated App Disabling vulnerability

The miniOrange Discord Integration plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on an several AJAX actions including 'mo_discord_check_capp_enable' and 'mo_discord_custom_app_enable_change_update' in versions up to, and including, 2.1.5. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those functions leading to plugin options update.