Access violation vulnerability in Configurator Theme Core 1.4.7

The Configurator Theme Core plugin for WordPress has a security issue that allows users to gain higher levels of access than they should have. This problem affects all versions of the plugin, including version 1.4.7. The issue is caused by the plugin not checking user information carefully before making changes to the database. As a result, attackers who are logged in and have at least Subscriber-level access can increase their privileges to the level of Administrator.