Security For WooCommerce WordPress Plugin Authentication Bypass Vulnerability

The Security For WooCommerce WordPress plugin through 1.0.16 contains an access control vulnerability in several REST API routes.

Unauthenticated users can exploit these unprotected routes to generate login tokens for every user and then retrieve them, allowing them to log in as any user, including administrators.