Vendor
An improper authorization vulnerability in the Codestar framework integration within the Product Gallery Slider & Additional Variation Images for WooCommerce plugin allows Shop Managers to escalate privileges to administrator via arbitrary WordPress option modification.