CVE-2021-4337

CVE-2021-4337 describes an authorization bypass in Sixteen XforWooCommerce Add-On Plugins for WordPress caused by a missing capability check in the wp_ajax_svx_ajax_factory function. Authenticated users with subscriber-level permissions and above can read, edit, or delete WordPress settings, plug...