The woocommerce-store-toolkit plugin prior to 1.5.8 for WordPress has privilege escalation.
visser store toolkit for woocommerce