Woocommerce Support System < 1.2.3 - Unauthenticated Ticket Deletion/Update, Settings Update etc

Description

The plugin is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on several functions hook via 'init', 'admin_init', and AJAX actions, allowing unauthenticated attackers to perform a variety of actions such as modifying and deleting user tickets, editing settings, and more.