Access violation vulnerability in WooCommerce Customers Manager 30.1

The WooCommerce Customers Manager plugin for WordPress has a security issue that allows unauthorized people to access it. This is because there is no check to make sure a person has the right permissions before using certain actions, like ‘wccm_update_user_meta’. This affects all versions of the plugin, up to and including version 30.1. This means that someone who is logged in and has at least subscriber-level access can change the plugin’s settings and potentially launch a Stored Cross-Site Scripting attack.