Advisories · Technology

Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager.

Every CVE that names Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42645 CVE record

CVSS 4.3 Medium

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.11.0 - Cross Site Request Forgery (CSRF) vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Cross-site request forgery (CSRF)
Not analysed yet 29 Apr 2026
CVE-2025-58972 CVE record

CVSS 7.2 High

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Path traversal
Not analysed yet 6 Nov 2025
CVE-2024-32589 CVE record

CVSS 7.1 High

WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Broken access control
Not analysed yet 31 Aug 2025
CVE-2025-54715 CVE record

CVSS 4.9 Medium

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Path traversal
Not analysed yet 14 Aug 2025
CVE-2025-22723 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Unrestricted file upload
Not analysed yet 21 Jan 2025
CVE-2024-54265 CVE record

CVSS 7.1 High

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Dec 2024
CVE-2024-38708 CVE record

CVSS 8.5 High

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- SQL injection
Not analysed yet 22 Jul 2024
CVE-2024-34556 CVE record

CVSS 5.3 Medium

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Information disclosure
Not analysed yet 9 May 2024
CVE-2024-34557 CVE record

CVSS 4.3 Medium

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Cross-site request forgery (CSRF)
Not analysed yet 9 May 2024
CVE-2024-27998 CVE record

CVSS 7.1 High

WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2024