Team Builder – Meet the Team WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Team Builder – Meet the Team plugin for WordPress, in all versions through 1.3. The issue arises from a lack of proper capability checks in the save_team_builder_options() function, allowing authenticated attackers with Subscriber-level access or higher to unauthorizedly modify the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized users with Subscriber-level access and above to modify the plugin's settings, potentially leading to unauthorized changes in the website's functionality or appearance.