Product Slider for WooCommerce <= 2.5.6 is vulnerable to Authenticated Arbitrary Options Deletion vulnerability

The Product Slider for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the spwps_reset_ajax and spwps_get_icons functions called via AJAX actions in versions up to, and including, 2.5.6. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to reset arbitrary options and retrieve data.