Input validation vulnerability in WooCommerce Pre-Orders 2.0.2

The WooCommerce Pre-Orders plugin for WordPress has a security vulnerability in versions up to and including 2.0.2. This vulnerability is caused by the lack or incorrect validation of a certain type of code called “nonce”. Unauthenticated attackers could exploit this vulnerability by tricking a site administrator into clicking a malicious link. This could allow the attacker to do things like email pre-order customers, change release dates, mark all pre-orders for a product as complete, and cancel pre-orders for products.