Vulnerabilities

TI-2026-30904 CVE-2026-42645 · GHSA-jp87-77r9-9jpw

Cross-site request forgery in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with…

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.001 Published 2026-04-29 No fix listed CWE-352

TI-2025-36616 CVE-2025-58972 · GHSA-4gh8-cr63-898j

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability

LOW 34

Path Traversal: '.../...//' vulnerability in Dmitry V.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00507 Published 2025-11-06 No fix listed CWE-35

TI-2025-38332 CVE-2025-62009 · GHSA-2v22-4548-2w5h

WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00149 Published 2025-10-22 No fix listed CWE-352

TI-2024-21476 CVE-2024-32589 · GHSA-6v8g-vwwv-97gg

WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerability

LOW 30

Missing Authorization vulnerability in Dmitry V.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00171 Published 2025-08-31 No fix listed CWE-862

TI-2025-33525 CVE-2025-53588 · GHSA-2g8j-3jgp-qrrv

WordPress UPC/EAN/GTIN Code Generator Plugin <= 2.0.2 - Arbitrary File Deletion Vulnerability

LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00384 Published 2025-08-28 No fix listed CWE-22

TI-2025-34478 CVE-2025-54715 · GHSA-5pcr-24rf-497w

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

LOW 23

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0044 Published 2025-08-14 No fix listed CWE-22

TI-2025-23950 CVE-2025-32929 · GHSA-wfm6-6f2v-8xgw

WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Arbitrary Content Deletion vulnerability

LOW 39

Missing Authorization vulnerability in Dmitry V.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-15 No fix listed CWE-862

TI-2025-23016 CVE-2025-31879 · GHSA-6vw3-5cc7-rmc7

WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Settings Change vulnerability

LOW 24

Missing Authorization vulnerability in Dmitry V.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00281 Published 2025-04-01 No fix listed CWE-862

TI-2025-23015 CVE-2025-31878 · GHSA-5xff-m446-cjf6

WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Settings Change vulnerability

LOW 24

Missing Authorization vulnerability in Dmitry V.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00281 Published 2025-04-01 No fix listed CWE-862

TI-2025-18314 CVE-2025-24597 · GHSA-pg5x-hfc4-9689

WordPress Barcode Generator for WooCommerce plugin <= 2.0.2 - Sensitive Data Exposure vulnerability

LOW 29

Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2025-01-31 No fix listed CWE-201

TI-2025-18320 CVE-2025-24603 · GHSA-m3xv-cj33-8m4w

Missing authorization in Dmitry V. (CEO of "UKR Solution") Print Barcode Labels for your…

LOW 20

Missing Authorization vulnerability in Dmitry V.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00244 Published 2025-01-27 No fix listed CWE-862

TI-2025-16605 CVE-2025-22723 · GHSA-q38q-p8xv-67g9

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability

MEDIUM 48

Unrestricted Upload of File with Dangerous Type vulnerability in Dmitry V.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00492 Published 2025-01-21 No fix listed CWE-434

TI-2024-36354 CVE-2024-54265 · GHSA-g484-4fg8-w2qw

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dmitry V.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79

TI-2024-22858 CVE-2024-34556 · GHSA-9rg3-rx78-443j

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data…

LOW 31

Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00585 Published 2024-05-09 No fix listed CWE-201

TI-2024-22859 CVE-2024-34557 · GHSA-6v26-2m6m-3xjp

Cross-site request forgery in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with…

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0025 Published 2024-05-09 No fix listed CWE-352

TI-2024-18599 CVE-2024-27998 · GHSA-38p6-v2j3-42g3

WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dmitry V.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2024-03-19 No fix listed CWE-79

Vulnerabilities

Filters