VendorsZaytechsmart_online_order_for_cloverany version
Vulnerabilities

Zaytech Smart Online Order For Clover any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2024-43253
WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
Published 2024-11-01 · Modified
9.8EPSS 0.006
CVE-2024-43254
WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
Published 2024-11-01 · Modified
8.8EPSS 0.004
CVE-2024-31238
WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-04-12 · Modified
8.8EPSS 0.002
CVE-2023-46312
WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-10-31 · Modified
7.1EPSS 0.003
CVE-2024-7032
Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion
Published 2024-08-21 · Modified
6.5EPSS 0.005
CVE-2024-29115
WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-19 · Modified
6.5EPSS 0.003
CVE-2024-9895
Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
Published 2024-10-15 · Analyzed
6.4EPSS 0.004
CVE-2024-8787
Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting
Published 2024-10-16 · Analyzed
6.1EPSS 0.004
CVE-2024-7030
Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update
Published 2024-08-21 · Modified
4.3EPSS 0.004