Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Smart Online Order for Clover — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Smart Online Order for Clover, with AI-generated Chinese analysis, references, and POCs.

This page details known vulnerabilities associated with the Smart Online Order for Clover product. It aggregates a comprehensive collection of security weaknesses, ranging from cross-site scripting and SQL injection to insecure direct object references and logic flaws, spanning from the product's initial release through the most recent patches. The data includes entries covering various severity levels and exploitation scenarios, ensuring a holistic view of the application's security posture over time. Users can leverage this resource to effectively track vendor advisories and monitor the progression of fixes issued by the development team. It also allows security professionals to understand the specific characteristics of each weakness class within the context of this specific e-commerce integration, facilitating better risk assessment. Furthermore, the page serves as a historical archive for looking up the vulnerability history of Smart Online Order for Clover, enabling teams to review past issues, identify recurring patterns in the codebase, and verify the status of current exposures. This centralized view supports both proactive defense strategies and retrospective analysis, helping organizations maintain a secure deployment of the Clover ecosystem by keeping abreast of all relevant security updates and potential risks without needing to consult multiple disparate sources.

Vendor: Zaytech

CVE ID Title CVSS Severity Published
CVE-2026-66700 WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-13
CVE-2026-42746 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability CWE-201 7.3 High 2026-05-27
CVE-2026-42738 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-05-27
CVE-2026-42745 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability CWE-288 7.3 High 2026-05-27
CVE-2025-15635 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2026-04-15
CVE-2024-43253 WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability CWE-862 5.3 Medium 2024-11-01
CVE-2024-43254 WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-11-01
CVE-2024-8787 Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2024-10-16
CVE-2024-9895 Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode CWE-79 6.4 Medium 2024-10-15
CVE-2024-7030 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update CWE-862 4.3 Medium 2024-08-21
CVE-2024-7032 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion CWE-862 6.5 Medium 2024-08-21
CVE-2024-31238 WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium 2024-04-12
CVE-2024-29115 WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-03-19
CVE-2023-46312 WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High 2023-10-31

All 14 known CVE vulnerabilities affecting Smart Online Order for Clover with full Chinese analysis, references, and POCs where available.