CVE-2023-46312

CVE-2023-46312 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Zaytech Smart Online Order for Clover plugin (WordPress)

CVE-2024-29115

CVE-2024-29115 is a Stored XSS vulnerability in Zaytech Smart Online Order for Clover (WordPress plugin). Connected sources confirm the issue affects the Clover plugin for Smart Online Order up to version 1.5.5 and describe an improper neutralization of input during web page generation leading to...

CVE-2024-31238

CVE-2024-31238 is a Cross‑Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Smart Online Order for Clover” (by Zaytech). The CVE descriptor states the issue affects Smart Online Order for Clover versions from n/a up to 1.5.5. The available connected documents consistently describ...

CVE-2024-7032

CVE-2024-7032 affects the WordPress plugin Smart Online Order for Clover . The vulnerability is a missing authorization check in the function moo_deactivateAndClean , present in all versions up to and including 1.5.6, which could allow unauthenticated attackers to deactivate the plugin and drop a...

CVE-2024-8787

CVE-2024-8787 (Smart Online Order for Clover, WordPress) is a Reflected Cross-Site Scripting vulnerability caused by improper escaping when using add_query_arg and remove_query_arg. It affects all versions up to and including 1.5.7. Unauthenticated attackers can inject arbitrary scripts into page...

CVE-2024-43254

CVE-2024-43254 affects the WordPress plugin Clover Online Orders (Smart Online Order for Clover). The connected docs identify a Missing Authorization issue due to misconfigured access control in Smart Online Order for Clover up to version 1.5.6. The Wordfence/CVE entries note the vulnerability as...

CVE-2024-9895

CVE-2024-9895 affects the WordPress plugin Smart Online Order for Clover (versions

CVE-2024-7030

Summary (CVE-2024-7030) : The WordPress plugin “Smart Online Order for Clover” is vulnerable in all versions up to and including 1.5.6 due to a missing capability check. This enables authenticated attackers with Subscriber-level access and above to modify data such as product/category description...

CVE-2024-43253

CVE-2024-43253 describes a Missing Authorization vulnerability in the WordPress plugin “Smart Online Order” for Clover (Zaytech). The issue allows accessing functionality not properly constrained by ACLs. Affected range: Clover Online Orders from n/a through 1.5.6. Public references indicate a hi...