The woocommerce-exporter plugin prior to 1.8.4 for WordPress has privilege escalation.
visser store exporter for woocommerce