Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Smart Online Order for Clover — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Smart Online Order for Clover, with AI-generated Chinese analysis, references, and POCs.

Vendor: Zaytech

CVE IDTitleCVSSSeverityPaused
CVE-2025-15635 WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2026-04-15
CVE-2024-43253 WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability CWE-862 5.3 Medium2024-11-01
CVE-2024-43254 WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-11-01
CVE-2024-8787 Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2024-10-16
CVE-2024-9895 Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode CWE-79 6.4 Medium2024-10-15
CVE-2024-7030 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update CWE-862 4.3 Medium2024-08-21
CVE-2024-7032 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion CWE-862 6.5 Medium2024-08-21
CVE-2024-31238 WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium2024-04-12
CVE-2024-29115 WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-03-19
CVE-2023-46312 WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-10-31

All 10 known CVE vulnerabilities affecting Smart Online Order for Clover with full Chinese analysis, references, and POCs where available.