MultiParcels Shipping For WooCommerce < 1.14.14 is vulnerable to Subscriber+ Arbitrary Shipment Deletion vulnerability

The MultiParcels Shipping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'get_history' function in versions up to, and including, 1.14.13. This makes it possible for authenticated attackers with subscriber-level permissions to delete arbitrary shipments.