Advisories · Technology

ZAYTECH Smart Online Order for Clover.

Every CVE that names ZAYTECH Smart Online Order for Clover among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66700 CVE record

CVSS 7.1 High

WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
- ZAYTECH Smart Online Order for Clover
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2026
CVE-2026-42746 CVE record

CVSS 7.3 High

WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability
- ZAYTECH Smart Online Order for Clover
- Information disclosure
Not analysed yet 27 May 2026
CVE-2026-42745 CVE record

CVSS 7.3 High

WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability
- ZAYTECH Smart Online Order for Clover
- Authentication bypass
Not analysed yet 27 May 2026
CVE-2026-42738 CVE record

CVSS 7.1 High

WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability
- ZAYTECH Smart Online Order for Clover
- Cross-site scripting (XSS)
Not analysed yet 27 May 2026
CVE-2025-15635 CVE record

CVSS 4.3 Medium

WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability
- ZAYTECH Smart Online Order for Clover
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2026
CVE-2024-43253 CVE record

CVSS 5.3 Medium

WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
- ZAYTECH Smart Online Order for Clover
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-43254 CVE record

CVSS 4.3 Medium

WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
- ZAYTECH Smart Online Order for Clover
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-31238 CVE record

CVSS 5.4 Medium

WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability
- Zaytech Smart Online Order for Clover
- Cross-site request forgery (CSRF)
Not analysed yet 12 Apr 2024
CVE-2024-29115 CVE record

CVSS 6.5 Medium

WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
- Zaytech Smart Online Order for Clover
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2024
CVE-2023-46312 CVE record

CVSS 7.1 High

WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
- Zaytech Smart Online Order for Clover
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2023