Build App Online <= 1.0.19 - Subscriber+ Privilege Escalation

Description The plugin does not have authorisation in its update_user_meta_value function, allowing any authenticated users, such as subscriber to update arbitrary user metadata and grand themselves administrator privileges