WordPress Synchrony Financing plugin 1.0.5-1.1.1 - Unauthenticated Order Takeover vulnerability

Unauthenticated Order Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Synchrony Financing versions 1.0.5-1.1.1...