CVE-2024-43254

Description

References

• patchstack.com/database/Wordpress/Plugin/clover-online-orders/vulnerability/wordpress-smart-online-order-for-clover-plugin-1-5-6-broken-access-control-vulnerability-2

More vulnerabilities in smart online order for clover

• CVE-2024-43253CRITICAL 9.8Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for …
• CVE-2024-8787MEDIUM 6.1The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & rem…
• CVE-2024-9895MEDIUM 5.4The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortc…
• CVE-2024-7032MEDIUM 6.5The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the '…
• CVE-2024-7030MEDIUM 4.3The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check …