Vulnerabilities > Zaytech
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-15 | CVE-2024-9895 | Cross-site Scripting vulnerability in Zaytech Smart Online Order for Clover The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-08-21 | CVE-2024-7030 | Missing Authorization vulnerability in Zaytech Smart Online Order for Clover The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.5.6. | 4.3 |
| 2024-08-21 | CVE-2024-7032 | Missing Authorization vulnerability in Zaytech Smart Online Order for Clover The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all versions up to, and including, 1.5.6. | 6.5 |
| 2023-10-31 | CVE-2023-46312 | Cross-site Scripting vulnerability in Zaytech Smart Online Order for Clover Unauth. | 6.1 |