WooCommerce GoCardless Gateway < 2.5.7 - Unauthenticated Sensitive Information Disclosure

The plugin does not check user permissions before displaying sensitive information about an Order, leading to sensitive information disclosure as well as the ability for an unauthenticated user to cancel any guest's order...