Input validation vulnerability in Phone Orders for WooCommerce 3.7.1

The Phone Orders for WooCommerce plugin for WordPress has a vulnerability that could allow unauthenticated attackers to perform actions on behalf of administrators. This vulnerability exists in versions up to and including 3.7.1. It occurs because the ajax_gate function, which controls many additional functions, does not have any nonce validation. This means that attackers can create a special link and trick a site administrator into clicking on it. The link would then allow the attackers to perform actions on behalf of the administrator.