Plugin icon

Smart Online Order for Clover

clover-online-orders

Vulnerabilities:

14

Last Updated:

August 6, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-08-10
Title
Smart Online Order for Clover < 1.6.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.2
CVSS
7.2 (high)
Published
2026-05-28
Title
Smart Online Order for Clover < 1.6.1 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.6.1
CVSS
5.3 (medium)
Published
2026-05-28
Title
Smart Online Order for Clover < 1.6.1 - Missing Authorization
Fixed in
Fixed in 1.6.1
CVSS
5.3 (medium)
Published
2026-05-27
Title
Smart Online Order for Clover < 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.1
CVSS
7.2 (high)
Published
2026-04-15
Title
Smart Online Order for Clover <= 1.6.0 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2024-10-15
Title
Smart Online Order for Clover < 1.5.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.8
CVSS
6.1 (medium)
Published
2024-10-14
Title
Smart Online Order for Clover < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
Fixed in
Fixed in 1.5.8
CVSS
6.4 (medium)
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update
Fixed in
Fixed in 1.5.7
CVSS
4.3 (medium)
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Plugin Deactivation and Data Deletion
Fixed in
Fixed in 1.5.7
CVSS
6.5 (medium)
Published
2024-08-12
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization
Fixed in
Fixed in 1.5.7
CVSS
4.3 (medium)
Published
2024-08-12
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization
Fixed in
Fixed in 1.5.7
CVSS
5.3 (medium)
Published
2024-04-05
Title
Smart Online Order for Clover < 1.5.5 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.5
CVSS
4.3 (medium)
Published
2024-03-16
Title
Smart Online Order for Clover < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.6
CVSS
6.4 (medium)
Published
2023-10-22
Title
Smart Online Order for Clover < 1.5.5 - Reflected XSS
Fixed in
Fixed in 1.5.5
CVSS
7.1 (high)