## https://sploitus.com/exploit?id=WPEX-ID:BB9F355A-BE33-41B1-AF36-0A30C24BEC8C
As a shop manager or product vendor admin:
Edit an order/create an order.
Search for a user (any user, including admin level users).
Select the user, then edit the billing/shipping address and use the Load (Billing|Shipping) Address tool.
Via your browser console, observe the resulting ajax request (action: woocommerce_get_customer_details) and response.