WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by V1t in WordPress Plugin Car Rental Manager versions = 1.3.7...