In Moodle, insufficient capability checks meant message deletions were not limited to the current user.Referenceshttps://moodle.org/mod/forum/discuss.php?d=424803
