Authentication vulnerability in Simpler Checkout 1.1.9

The Simpler Checkout plugin for WordPress has a security issue in versions 0.7.0 to 1.1.9. This is because the plugin does not properly check a user’s identity before allowing them to log in as an admin through the simplerwc_woocommerce_order_created() function. This means that someone who is not logged in can pretend to be another user based on their order ID, which could potentially give them access to an administrator account if the site admin has placed a test order.