Shipmondo – A complete shipping solution for WooCommerce < 5.0.4 - Missing Authorization to Authenticated (Customer+) Information Disclosure

Description

The Shipmondo – A complete shipping solution for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getPriceRanges() function in all versions up to, and including, 5.0.3. This makes it possible for authenticated attackers, with customer-level access and above, to export arbitrary WordPress options.