Zaytech

14 CVEs across 2 Zaytech products. Browse Zaytech vulnerabilities, severities, and proof-of-concept exploits.

Zaytech products with known CVEs

ProductCVEs
Smart Online Order For Clover10
Smart Online Order For Clover9
Zaytech CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66700High7.12026-08-13Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
CVE-2026-42746High7.32026-05-27Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitiv…
CVE-2026-42745High7.32026-05-27Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypa…
CVE-2026-42738High7.12026-05-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Online Order for Clover clover-online-order…
CVE-2025-15635Medium4.32026-04-15Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affe…
CVE-2024-43254Medium4.32024-11-01Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th…
CVE-2024-43253Medium5.32024-11-01Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th…
CVE-2024-8787Medium6.12024-10-16The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg witho…
CVE-2024-9895Medium6.42024-10-15The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions…
CVE-2024-7032Medium6.52024-08-21The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndCl…
CVE-2024-7030Medium4.32024-08-21The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several function…
CVE-2024-31238Medium5.42024-04-12Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5…
CVE-2024-29115Medium6.52024-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.T…
CVE-2023-46312High7.12023-10-31Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zaytech Smart Online Order for Clover plugin <= 1.5.4 versions.