Access violation vulnerability in Bricks Builder 1.9.8

The Bricks Builder plugin for WordPress has a security vulnerability in all versions up to 1.9.8. This vulnerability is called Insecure Direct Object Reference and it is caused by not checking a key that is controlled by the user. This means that people who are logged in and have Contributor-level access or higher can change posts and pages that were created by other users, even admins. To do this, an admin would have to give access to the editor for that specific user or for all users with a certain type of account.