WPC Frequently Bought Together for WooCommerce < 7.0.4 - Missing Authorization

Description

The WPC Frequently Bought Together for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajax_get_search_results, ajax_import_export, and ajax_import_export_save functions in versions up to, and including, 7.0.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions.