[Security] Member became mod automatically??

[.m.]

^ assuming that there was no preset group promotion from regular member to staff member,
member group can be changed from database access and also from files access (ftp access is sufficient !)
if there is no such misuse then it could be a bug in the default MyBB or one of the used plugins
so far I've not come across such bug ..