ND Shortcodes For Visual Composer < 6.0 - Unauthenticated WP Options Update

Privilege escalation vulnerability that could allow an unauthenticated user to modify the settings of WordPress and to take over the blog and its database. Please note that the vulnerability requires the blog to use one of the several themes from the author in order to exploit it, otherwise the settings page isn’t loaded