Incorrect permission while setting the source type and origin of order

For ajax requests, bail if the referer is not an admin.

This vulnerability affects the following application versions:

• WooCommerce 8.5.0
• WooCommerce 8.5.0-beta.1
• WooCommerce 8.5.0-rc.1
• WooCommerce 8.5.1
• WooCommerce 8.5.2
• WooCommerce 8.6.0
• WooCommerce 8.6.0-beta.1
• WooCommerce 8.6.0-rc.1
• WooCommerce 8.6.1