WordPress WC Buckaroo BPE Gateway plugin < 4.9.0 - Subscriber+ Unauthorized Order Refund vulnerability

Subscriber+ Unauthorized Order Refund vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Buckaroo Woocommerce Payments Plugin versions 4.9.0...