Bosa Elementor Addons and Templates for WooCommerce < 1.0.13 - Missing Authorization

Description

The Bosa Elementor Addons and Templates for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the start_importer and plugin_requirements functions in versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to start the importer and retrieve plugin requirements.