The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.Referenceshttps://wordpress.org/plugins/admin-management-xtended/#developershttps://security.szurek.pl/admin-management-xtended-240-privilege-escalation.html
