Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Access and Modification

Description

The plugin does not perform capability checks on multiple AJAX functions, leading to potential unauthorized access to data and changes to plugin settings. This can result in authenticated users with low-level permissions, such as subscribers, retrieving arbitrary order information or altering products, orders, and sensitive information not associated with their account.