Plugin icon

Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)

barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Plugin closed

Vulnerabilities:

16

Last Updated:

July 3, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-04-15
Title
Barcode Scanner (+Mobile App) < 1.12.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication
Fixed in
Fixed in 1.12.0
CVSS
9.8 (critical)
Published
2026-03-18
Title
Barcode Scanner with Inventory & Order Manager < 1.12.0 - Cross-Site Request Forgery
Fixed in
Fixed in 1.12.0
CVSS
4.3 (medium)
Published
2025-10-15
Title
Barcode Scanner with Inventory & Order Manager < 1.10.5 - Authenticated (Shop Manager+) Directory Traversal
Fixed in
Fixed in 1.10.5
CVSS
2.7 (low)
Published
2025-08-14
Title
Barcode Scanner with Inventory & Order Manager < 1.9.1 - Authenticated (Admin+) Arbitrary File Download
Fixed in
Fixed in 1.9.1
CVSS
4.9 (medium)
Published
2025-01-15
Title
Barcode Scanner with Inventory & Order Manager < 1.7.0 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.7.0
CVSS
7.2 (high)
Published
2024-12-10
Title
Barcode Scanner with Inventory & Order Manager < 1.6.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.6.7
CVSS
6.1 (medium)
Published
2024-07-11
Title
Barcode Scanner with Inventory & Order Manager < 1.6.2 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.6.2
CVSS
8.5 (high)
Published
2024-05-07
Title
Barcode Scanner with Inventory & Order Manager < 1.5.5 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.5
CVSS
4.3 (medium)
Published
2024-05-07
Title
Barcode Scanner with Inventory & Order Manager < 1.5.5 - Unauthenticated Information Exposure
Fixed in
Fixed in 1.5.5
CVSS
5.3 (medium)
Published
2024-04-30
Title
Barcode Scanner with Inventory & Order Manager < 1.5.5 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.5.5
CVSS
8.8 (high)
Published
2024-04-25
Title
Barcode Scanner with Inventory & Order Manager < 1.5.4 - Missing Authorization
Fixed in
Fixed in 1.5.4
CVSS
5.3 (medium)
Published
2024-04-25
Title
Barcode Scanner with Inventory & Order Manager < 1.5.4 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 1.5.4
CVSS
9.8 (critical)
Published
2024-04-16
Title
Barcode Scanner with Inventory & Order Manager < 1.5.4 - Missing Authorization
Fixed in
Fixed in 1.5.4
CVSS
6.4 (medium)
Published
2024-03-15
Title
Barcode Scanner with Inventory & Order Manager < 1.5.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.4
CVSS
6.1 (medium)
Published
2024-01-08
Title
Barcode Scanner with Inventory & Order Manager < 1.5.2 - Unauthenticated SQL Injection via userToken
Fixed in
Fixed in 1.5.2
CVSS
9.8 (critical)
Published
2024-01-08
Title
Barcode Scanner with Inventory & Order Manager < 1.5.2 - Unauthenticated Arbitrary File Upload via uploadFile
Fixed in
Fixed in 1.5.2
CVSS
9.8 (critical)