Zaytech
9 CVEs across 2 Zaytech products. Browse Zaytech vulnerabilities, severities, and proof-of-concept exploits.
Zaytech products with known CVEs
Zaytech CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-66700 | High | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions. |
CVE-2026-42746 | High | 7.3 | 2026-05-27 | Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitiv… |
CVE-2026-42745 | High | 7.3 | 2026-05-27 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypa… |
CVE-2026-42738 | High | 7.1 | 2026-05-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Online Order for Clover clover-online-order… |
CVE-2025-15635 | Medium | 4.3 | 2026-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affe… |
CVE-2024-43254 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-43253 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-8787 | Medium | 6.1 | 2024-10-16 | The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg witho… |
CVE-2024-9895 | Medium | 6.4 | 2024-10-15 | The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions… |
CVE-2024-7032 | Medium | 6.5 | 2024-08-21 | The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndCl… |
CVE-2024-7030 | Medium | 4.3 | 2024-08-21 | The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several function… |
CVE-2024-31238 | Medium | 5.4 | 2024-04-12 | Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5… |
CVE-2024-29115 | Medium | 6.5 | 2024-03-19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.T… |
CVE-2023-46312 | High | 7.1 | 2023-10-31 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zaytech Smart Online Order for Clover plugin <= 1.5.4 versions. |