Backend information showing on the frontend

I see that product tables that are created are available on the frontend via /wpt_product_table/[slug] – So if the table is called table1 it will show on /wpt_product_table/table1/

That view also shows the shortcode.

Although I can’t think of a way to misuse that right away it feels like the wrong way to do it. That view surely should not be available for users that are not logged in and without editing capability.