UkrSolution

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

UkrSolution records in CISA KEV

No UkrSolution vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Barcode Scanner And Inventory Manager 4 records MEDIUM Print Labels With Barcodes 3 records LOW

Records

4 records in Barcode Scanner And Inventory Manager · all components

TI-2023-28649 CVE-2023-52221 · GHSA-whj3-2mcj-m59f

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner and Inventory manager.This issue affects Barcode Scanner and Inventory manager: from n/a through 1.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00631 Published 2024-01-24 No fix listed CWE-434

TI-2024-22152 CVE-2024-33565 · GHSA-v9q9-fr8r-vj8c

Missing authorization in UkrSolution Barcode Scanner with Inventory & Order Manager

MEDIUM 45

Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.3.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00413 Published 2024-06-09 No fix listed CWE-862

TI-2023-28643 CVE-2023-52215 · GHSA-5vhq-6jvc-vjp4

WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection

MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00553 Published 2024-01-08 No fix listed CWE-89

TI-2024-25942 CVE-2024-38708 · GHSA-xfq7-jp86-6q6q

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability

MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00455 Published 2024-07-22 No fix listed CWE-89

Open these records in search →

Critical	5
High	4
Medium	2
Low	0
No CVSS	0