Access violation vulnerability in MyRewards – Loyalty Points and Rewards for WooCommerce – Reward orders, referrals, product reviews and more 5.3.0

The MyRewards plugin for WordPress has a security issue that allows unauthorized users to gain access without permission. This is because there is a missing capability check on certain functions in the /assets/lws-adminpanel/include/internal/ajax.php file in versions 5.3.0 and below. This means that attackers who are logged in with subscriber-level access or higher can perform actions that they should not be allowed to do.