Allows players to tp anyone to themselves without consent or them being online. Even with 0 perms, they can still use the command. It was tested on a few servers. This may or may not have been tested by you, but I have tested it and you can tp someone to you, with no perms at all. Please fix

Working without issue on my server , have you checked the perms to make sure which players have been granted them (inc default) ?

yes all perms have been checked. But even without perms, it is still useable. so it doesn't matter if they have perms or not. 

you must be of auth level,
if (playerAuthLevel >= requiredAuthLevel) return true;

or you must have permission
return !string.IsNullOrEmpty(perm) && permission.UserHasPermission(player.UserIDString, perm);

some reasons you might have your issue
1. a different plugin with the same command,
2. someone has modified this plugin,
3. a plugin is giving players auth level 1 or higher
4. there's an Oxide bug
5. or you have the permission even when you think you don't

#3 and #4 are very unlikely
#1 and #5 are the only reasons this has ever happened

I checked this on a LIVE server anyway, one that has never had this plugin installed and no player was able to teleport me to them, or themselves to me

1- no other plugin has the same command
2- nobody modified it as it's the default config
3 and 4 as you said is not likely
5- no, 0 perms even tried it on a default player and same issue. 

give me full access and I will check it out

mswenson82 at yahoo dot com