Perfect Brands for WooCommerce < 2.0.5 - Subscriber+ Sensitive Information Disclosure

The plugin does not have authorisation and CSRF checks in some of its AJAX actions, which could allow any authenticated users, such as subscriber to retrieve sensitive information about the server