WP EasyCart (<= 5.9.3)

The WP EasyCart plugin up to version 5.9.3 is vulnerable to unauthorized privilege escalation via an insecure AJAX handler, allowing attackers with store manager roles to manipulate site options.