Share 
## https://sploitus.com/exploit?id=WPEX-ID:0ADCED32-70E2-452D-B919-2C9BB7351624
Requirements:
- Enable the "My Account" module of the plugin (/wp-admin/admin.php?page=wc-settings&tab=jetpack&wcj-cat=dashboard&section=all_module)
- Add a status such as Canceled in the "Add Order Status Actions" settings of the module (/wp-admin/admin.php?page=wc-settings&tab=jetpack&wcj-cat=emails_and_misc&section=my_account)


As any logged in user, such as a subscriber, place an order and go the Order dashboard, a 'Canceled' action will be displayed in the Actions column, copy its link and change the status=canceled to status=processing, e.g: https://example.com/?wcj_action=wcj_woocommerce_mark_order_status&status=processing&order_id=337&_wpnonce=f3f6e8839d