Access violation vulnerability in Open Close WooCommerce Store – Best Business Schedules Manager 4.9.1

The “Open Close WooCommerce Store” plugin, which helps manage business schedules on WordPress, has a security issue that could allow unauthorized changes to be made to its data. This is because the plugin does not have a check in place to ensure that only authorized users can access its ajax_switch_active and ajax_update_timezone functions. As a result, attackers who have at least subscriber-level access could potentially modify the active status and timezone.