Plugin icon

Smart Online Order for Clover

clover-online-orders

Vulnerabilities:

9

Last Updated:

August 26, 2025

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2024-10-15
Title
Smart Online Order for Clover < 1.5.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.8
CVSS
6.1 (medium)
Published
2024-10-14
Title
Smart Online Order for Clover < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
Fixed in
Fixed in 1.5.8
CVSS
6.4 (medium)
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Data Update
Fixed in
Fixed in 1.5.7
CVSS
4.3 (medium)
Published
2024-08-20
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization to Plugin Deactivation and Data Deletion
Fixed in
Fixed in 1.5.7
CVSS
6.5 (medium)
Published
2024-08-12
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization
Fixed in
Fixed in 1.5.7
CVSS
5.3 (medium)
Published
2024-08-12
Title
Smart Online Order for Clover < 1.5.7 - Missing Authorization
Fixed in
Fixed in 1.5.7
CVSS
4.3 (medium)
Published
2024-04-05
Title
Smart Online Order for Clover < 1.5.5 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.5
CVSS
4.3 (medium)
Published
2024-03-16
Title
Smart Online Order for Clover < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.6
CVSS
6.4 (medium)
Published
2023-10-22
Title
Smart Online Order for Clover < 1.5.5 - Reflected XSS
Fixed in
Fixed in 1.5.5
CVSS
7.1 (high)