Zaytech Smart_online_order_for_clover
9 CVEs affecting Zaytech Smart_online_order_for_clover. Latest disclosed: 2024-11-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46312 | High | 7.1 | 2023-10-31 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zaytech Smart Online Order for Clover plugin <= 1.5.4 versions. |
CVE-2024-7032 | Medium | 6.5 | 2024-08-21 | The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndCl… |
CVE-2024-29115 | Medium | 6.5 | 2024-03-19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.T… |
CVE-2024-9895 | Medium | 6.4 | 2024-10-15 | The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions… |
CVE-2024-8787 | Medium | 6.1 | 2024-10-16 | The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg witho… |
CVE-2024-31238 | Medium | 5.4 | 2024-04-12 | Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5… |
CVE-2024-43253 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-43254 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-7030 | Medium | 4.3 | 2024-08-21 | The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several function… |