The problem seems to be line 381 in class.cpto.php.
apply_filters(‘pto/save-ajax-order’, $data, $key, $id) returns false instead of the order. The line above it (that is marked deprecated) returns the correct order integer.
When I comment out line 381, the plugin works as intended.