It is module bug. I have fixed module bug
Open file Mconnectsolutions\Trackorder\Controller\Index\Info.php
and replace
code in function private function getOrder()
at line number 59
from:
private function getOrder()
{
if ($data = $this->getRequest()->getParams()) {
$orderId = $data["order"];
$email = $data["email"];
$objectManager = \Magento\Framework\App\ObjectManager::getInstance();
$orderData = $objectManager->create('Magento\Sales\Model\Order')->loadByIncrementId($orderId);
$cEmail = $orderData->getCustomerEmail();
if ($cEmail == $email) {
$url = $this->link->getWindowUrl($orderData);
$parts = parse_url($url);
parse_str($parts['query'], $query);
$hash = $query['hash'];
if ($hash && $hash != '') {
$shippingInfoModel = $this->shippingInfoFactory->create()->loadByHash($hash);
$this->trackingData = $shippingInfoModel;
}
return $orderData;
} else {
return null;
}
}
}
To:
private function getOrder()
{
if ($data = $this->getRequest()->getParams()) {
$orderId = $data["order"];
$email = $data["email"];
$objectManager = \Magento\Framework\App\ObjectManager::getInstance();
$orderData = $objectManager->create('Magento\Sales\Model\Order')->loadByIncrementId($orderId);
$cEmail = $orderData->getCustomerEmail();
$storeManager = $objectManager->create('Magento\Store\Model\StoreManagerInterface');
$currentStoreId = $storeManager->getStore()->getId();
if ($cEmail == $email && $orderData->getStoreId() == $currentStoreId) {
$url = $this->link->getWindowUrl($orderData);
$parts = parse_url($url);
parse_str($parts['query'], $query);
$hash = $query['hash'];
if ($hash && $hash != '') {
$shippingInfoModel = $this->shippingInfoFactory->create()->loadByHash($hash);
$this->trackingData = $shippingInfoModel;
}
return $orderData;
} else {
return null;
}
}
}