WordPress < 5.5.2 - XML-RPC Privilege Escalation

The release notes state:

"Thanks to Justin Tran who reported an issue surrounding privilege escalation in XML-RPC. He also found and disclosed an issue around privilege escalation around post commenting via XML-RPC."