The woocommerce-store-toolkit plugin prior to 1.5.7 for WordPress has privilege escalation.
visser store toolkit for woocommerce