https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-43254.htmlhttps://patchthecve.com/cve/CVE-2024-43254.htmlWed, 17 Jun 2026 07:50:41 +0000MEDIUM 4.3: Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through <= 1.5.6.https://patchthecve.com/cve/CVE-2024-43253.htmlhttps://patchthecve.com/cve/CVE-2024-43253.htmlWed, 17 Jun 2026 07:50:40 +0000MEDIUM 5.3: Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through <= 1.5.6.https://patchthecve.com/cve/CVE-2024-8787.htmlhttps://patchthecve.com/cve/CVE-2024-8787.htmlWed, 17 Jun 2026 08:23:18 +0000MEDIUM 6.1: The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.5.7. This makes it possible for unauthenticated attackers to injechttps://patchthecve.com/cve/CVE-2024-9895.htmlhttps://patchthecve.com/cve/CVE-2024-9895.htmlWed, 17 Jun 2026 08:25:27 +0000MEDIUM 6.4: The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fhttps://patchthecve.com/cve/CVE-2024-7032.htmlhttps://patchthecve.com/cve/CVE-2024-7032.htmlWed, 17 Jun 2026 08:19:14 +0000MEDIUM 6.5: The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to deactivate the plugin and https://patchthecve.com/cve/CVE-2024-7030.htmlhttps://patchthecve.com/cve/CVE-2024-7030.htmlWed, 17 Jun 2026 08:19:13 +0000MEDIUM 4.3: The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, tohttps://patchthecve.com/cve/CVE-2024-31238.htmlhttps://patchthecve.com/cve/CVE-2024-31238.htmlWed, 17 Jun 2026 07:28:02 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5.