WordPress security by component
Barcode Scanner with Inventory & Order Manager
Plugin description
Barcode Scanner with Inventory & Order Manager is a WordPress component with 16 published CVE records in this archive. The latest tracked vulnerability was published Apr 29, 2026; the highest CVE/CNA score is 10.
Plugin slug:
barcode-scanner-lite-pos-to-manage-products-inventory-and-ordersLatest vulnerability
CVE-2026-42645: Barcode Scanner with Inventory & Order Manager: Cross-site request forgery
Barcode Scanner with Inventory & Order Manager is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 1.11.0.
| Safe version |
|
||
|---|---|---|---|
| Apr 29, 2026 |
CVE-2026-42645
Barcode Scanner with Inventory & Order Manager: Cross-site request forgery
Barcode Scanner with Inventory & Order Manager is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 1.11.0.
|
1.12.0 |
CVE4.3
NVDPending
|
| Apr 16, 2026 |
CVE-2026-4880
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale): Privilege escalation or authentication bypass
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.11.0.
|
> 1.11.0 |
CVE9.8
NVDPending
|
| Nov 06, 2025 |
CVE-2025-58972
Barcode Scanner with Inventory & Order Manager: Filesystem traversal
Barcode Scanner with Inventory & Order Manager is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.2
NVDPending
|
| Aug 31, 2025 |
CVE-2024-32589
Barcode Scanner with Inventory & Order Manager: A security weakness
Barcode Scanner with Inventory & Order Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Aug 14, 2025 |
CVE-2025-54715
Barcode Scanner with Inventory & Order Manager: Filesystem traversal
Barcode Scanner with Inventory & Order Manager is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE4.9
NVDPending
|
| Jan 21, 2025 |
CVE-2025-22723
Barcode Scanner with Inventory & Order Manager: Dangerous file upload
Barcode Scanner with Inventory & Order Manager is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.1
NVDPending
|
| Dec 13, 2024 |
CVE-2024-54265
Barcode Scanner with Inventory & Order Manager: Cross-site scripting
Barcode Scanner with Inventory & Order Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Jul 22, 2024 |
CVE-2024-38708
Barcode Scanner with Inventory & Order Manager: SQL injection
Barcode Scanner with Inventory & Order Manager is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.5
NVD8.8
|
| Jun 09, 2024 |
CVE-2024-33565
Barcode Scanner with Inventory & Order Manager: A security weakness
Barcode Scanner with Inventory & Order Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE9.1
NVD7.5
|
| May 17, 2024 |
CVE-2024-33567
Barcode Scanner with Inventory & Order Manager: Privilege escalation or authentication bypass
Barcode Scanner with Inventory & Order Manager is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| May 14, 2024 |
CVE-2024-34557
Barcode Scanner with Inventory & Order Manager: Cross-site request forgery
Barcode Scanner with Inventory & Order Manager is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| May 14, 2024 |
CVE-2024-34556
Barcode Scanner with Inventory & Order Manager: A security weakness
Barcode Scanner with Inventory & Order Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| May 02, 2024 |
CVE-2024-2661
Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader: SQL injection
Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Mar 19, 2024 |
CVE-2024-27998
Barcode Scanner with Inventory & Order Manager: Cross-site scripting
Barcode Scanner with Inventory & Order Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Jan 24, 2024 |
CVE-2023-52221
Barcode Scanner and Inventory manager: Dangerous file upload
Barcode Scanner and Inventory manager is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE10.0
NVD9.8
|
| Jan 08, 2024 |
CVE-2023-52215
Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce: SQL injection
Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE9.3
NVD9.8
|