Approved changes feed: RSS · Atom

cpe:2.3:a:zaytech:smart_online_order_for_clover:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZaytech (21d1e5d2-80de-523f-bfa0-1a7f49c792ce)
ProductSmart Online Order For Clover (e0db7d5e-f8e4-5ed3-8e1e-c5f15599caf5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-66700 vulnerable 2026-09-16 04:32:55.044538 WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
Published: 2026-08-13T13:37:19.362Z
Updated: 2026-08-13T15:31:54.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42746 vulnerable 2026-06-08 08:03:16.634130 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability
HIGH (7.3)
Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.
Published: 2026-05-27T09:49:05.391Z
Updated: 2026-05-27T10:50:46.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42745 vulnerable 2026-06-08 08:03:16.633975 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability
HIGH (7.3)
Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.
Published: 2026-05-27T09:49:05.368Z
Updated: 2026-05-27T10:51:00.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42738 vulnerable 2026-06-08 08:03:16.627803 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.
Published: 2026-05-27T09:49:04.835Z
Updated: 2026-05-27T10:51:56.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15635 vulnerable 2026-06-08 07:06:36.590275 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.
Published: 2026-04-15T15:49:53.280Z
Updated: 2026-04-28T16:10:57.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43254 vulnerable 2026-06-08 06:45:49.953307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43253 vulnerable 2026-06-08 06:45:49.952906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31238 vulnerable 2026-06-08 06:35:31.147174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29115 vulnerable 2026-06-08 06:33:28.767118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46312 vulnerable 2026-06-08 06:12:44.677314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.