Vulnerabilities

TI-2024-25942 CVE-2024-38708 · GHSA-xfq7-jp86-6q6q

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability

MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00455 Published 2024-07-22 No fix listed CWE-89

TI-2024-22152 CVE-2024-33565 · GHSA-v9q9-fr8r-vj8c

Missing authorization in UkrSolution Barcode Scanner with Inventory & Order Manager

MEDIUM 45

Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.3.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00413 Published 2024-06-09 No fix listed CWE-862

TI-2023-28649 CVE-2023-52221 · GHSA-whj3-2mcj-m59f

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner and Inventory manager.This issue affects Barcode Scanner and Inventory manager: from n/a through 1.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00631 Published 2024-01-24 No fix listed CWE-434

TI-2023-28643 CVE-2023-52215 · GHSA-5vhq-6jvc-vjp4

WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection

MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00553 Published 2024-01-08 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability

Missing authorization in UkrSolution Barcode Scanner with Inventory & Order Manager

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload

WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection