WC Vendors – vendors able to upload new attribute values

I’m using WC Vendors plugin, and somehow some vendors are adding new atribute values to the attributes even though there is a setting in WC Vendors to prevent this.

But I’m noticing that attribute values are being updated by some Vendors and I can’t replicate this when I login with my Vendor account.

I don’t know what is causing the issue and I wanted to know if there is a way to fully block attribute values from being added from a frontend user?