Input validation vulnerability in Metorik – Reports & Email Automation for WooCommerce 1.7.1

A popular plugin for WordPress called Metorik, used for reports and email automation for an online store plugin called WooCommerce, has a security issue. This means that versions up to 1.7.1 are at risk. The issue is caused by a missing or incorrect security check when a certain function is used. This allows attackers who are not logged in to the site to change the authorization token and track the items in a customer’s shopping cart. They can do this by tricking the site’s administrator into clicking on a link.