WordPress Nexi XPay plugin <= 8.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by hivesec in WordPress Plugin Nexi XPay versions = 8.3.1...