Input validation vulnerability in Awin – Advertiser Tracking for WooCommerce 2.0.0

The Awin – Advertiser Tracking plugin for WooCommerce on WordPress has a security issue in versions up to 2.0.0. This is because the plugin does not properly check for a security code, called a nonce, when generating a product feed. As a result, someone without proper authorization could create a fake request and trick a site administrator into taking an action, like clicking on a link.