Weak configuration vulnerability in WPC Shop as a Customer for WooCommerce 1.2.8

The WPC Shop, a Customer for WooCommerce plugin used on WordPress websites, has a security issue in versions 1.2.8 and below. This problem allows hackers with at least Subscriber-level access to take over customer accounts and gain more privileges. The issue is caused by a function that does not create a strong enough password. This means that if attackers use the ajax_login() function to generate a special key, they can use it to log in as site administrators.