elbanyaoui
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Smart Online Order for Clover | 4 | – | Oct 16, 2024 |
| Clover Payment Gateway by Zaytech for WooCommerce | 1 | – | Apr 9, 2024 |
Exploited and recent CVEs
- CVE-2024-8787 Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting 0.4%
- CVE-2024-9895 Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode 0.4%
- CVE-2024-7032 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion 0.5%
- CVE-2024-7030 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update 0.4%
- CVE-2024-0626 WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handler 0.6%