elbanyaoui

Products

ProductCVEsExploitedLatest
Smart Online Order for Clover4–Oct 16, 2024
Clover Payment Gateway by Zaytech for WooCommerce1–Apr 9, 2024

Exploited and recent CVEs

  • CVE-2024-8787 Medium 6.1 Smart Online Order for Clover <= 1.5.7 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-9895 Medium 6.4 Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode 0.4%
  • CVE-2024-7032 Medium 6.5 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Plugin Deactivation and Data Deletion 0.5%
  • CVE-2024-7030 Medium 4.3 Smart Online Order for Clover <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update 0.4%
  • CVE-2024-0626 Medium 5.3 WooCommerce Clover Payment Gateway <= 1.3.1 - Missing Authorization via callback_handler 0.6%