Access violation vulnerability in Embedder 1.3.5

The Embedder plugin for WordPress has a security issue that allows unauthorized changes to be made to its data. This can result in someone gaining more privileges than they should have. The problem is caused by a function called ajax_set_global_option() not properly checking for the right permission level. Attackers who have at least a Subscriber-level account can take advantage of this and change important settings on the WordPress site. This could potentially give them full control of the site.