The woo-address-book plugin prior to 1.6.0 for WordPress has save calls without nonce verification checks.
hallme woocommerce address book