Input validation vulnerability in WooCommerce Pre-Orders 1.9.0

The WooCommerce Pre-Orders plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Scripting. This type of attack can allow malicious users to inject malicious code into web pages which could be executed by unsuspecting users when they visit the page. The plugin is vulnerable in versions 1.9.0 and earlier due to a lack of safeguards to protect against such attacks.