We have released a security update for this plugin
The update addresses an issue where it was possible, in specific circumstances, to access private topics without correct authorization.
It is strongly advised to update to the latest version of the plugin (1.5.8).
If your forum is hosted by Communiteq, it has already been updated.