I have a private forum with access set to only the Administrator and Moderator. But when I make a post regular users are getting notifications. I discovered this because my SMTP plugin keeps a log of all emails going out. When I go to the Forum Members section and I look under any members' subscription check marks, anyone has the ability to see the hidden forums and subscribe to them. They don't have access to see the posts because they can't access the forum, but sometimes the notifications have the content of the post in the body of the email.

Why are regular users who do not have access to the forum able to subscribe to it and even see that it exists? I have attached screenshots showing that you can subscribe to any and all forums, private or not through your profile.

I have an Administration forum with a Private Test Forum that only I have access to, but people are getting notifications from it because they are able to select it from their profile.

WPForo: 2.4.17
Wordpress: 6.9.4