Order-tracking is a support function that lets customers check the status of a purchase or shipment. In commerce systems, it usually queries order records and returns details such as order number, delivery progress, contact information, or purchase history.
In cybersecurity, order-tracking matters because it often sits close to sensitive customer data while looking like a low-risk public feature. If access checks are weak, an attacker may be able to view other people's orders, harvest personal information, or use order details for phishing and social engineering. Defenders should treat tracking pages like security boundaries: enforce authorization on every request, minimize the data returned, log unusual lookup activity, and review plugins or third-party components that power the feature. A simple status page can become a confidentiality risk if it trusts user input too much or exposes more data than necessary.