The Colibri Page Builder plugin for WordPress has a security issue that allows people to change data without permission. This affects all versions up to and including 1.0.248. This means that anyone who is signed in with at least subscriber-level access can make changes to the settings without being authorized.