Woo themes have definitely dropped the ball here. When programming, making sure that authentication is working appropriately is the most basic form of security testing and they didn't do a very good job it would seem.