BuddyPress.org

What I’m saying here is that without being logged in at all, as just a random visitor, you can get to the admin page to edit external blog feeds, complete with Update button, if you know the URL, like the one above.

Testing as a logged-in non-admin user (subscriber level) has the same effect.

Have a look at this URL (http://jobsee.kr/community/groups/jobs-and-work/admin/external-blog-feeds) — you should be able to see the relevent admin page for that group, despite the fact that you have no credentials to do so.