Access violation vulnerability in Team Builder – Meet the Team 1.3

The Team Builder – Meet the Team plugin for WordPress has a security issue that allows unauthorized changes to be made to its data. This is because there is no check in place to ensure that only authorized users can modify the save_team_builder_options() function, in all versions up to and including 1.3. As a result, attackers who have at least Subscriber-level access to the site can make changes to the plugin’s settings.