# ZAYTECH Smart Online Order for Clover.

Every CVE that names ZAYTECH Smart Online Order for Clover among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-66700.md)
  `CVE-2026-66700` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 7.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2026-42746.md)
  `CVE-2026-42746` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 7.3 High · Not analysed yet · Published 27 May 2026 · Tags: Information disclosure
- [WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-42745.md)
  `CVE-2026-42745` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 7.3 High · Not analysed yet · Published 27 May 2026 · Tags: Authentication bypass
- [WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-42738.md)
  `CVE-2026-42738` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-15635.md)
  `CVE-2025-15635` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 4.3 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-43253.md)
  `CVE-2024-43253` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 5.3 Medium · Not analysed yet · Published 1 Nov 2024 · Tags: Broken access control
- [WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-43254.md)
  `CVE-2024-43254` · CVE record: ZAYTECH Smart Online Order for Clover · CVSS 4.3 Medium · Not analysed yet · Published 1 Nov 2024 · Tags: Broken access control
- [WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-31238.md)
  `CVE-2024-31238` · CVE record: Zaytech Smart Online Order for Clover · CVSS 5.4 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Cross-site request forgery (CSRF)
- [WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-29115.md)
  `CVE-2024-29115` · CVE record: Zaytech Smart Online Order for Clover · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-46312.md)
  `CVE-2023-46312` · CVE record: Zaytech Smart Online Order for Clover · CVSS 7.1 High · Not analysed yet · Published 31 Oct 2023 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=zaytech-smart-online-order-for-clover>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/zaytech-smart-online-order-for-clover/>. Everything for agents: <https://agentprime.io/llms.txt>.