Medium · 5.4 CVE-2024-31238 EUVD-2024-29134GHSA-frm8-8v27-f6qx

WordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ZAYTECH Product: Smart Online Order for Clover

Description

Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5.

Affected products

Vendor	Product	Affected	Fixed
Zaytech	Smart Online Order for Clover	≤ 1.5.5	—

References

https://patchstack.com/database/vulnerability/clover-online-orders/wordpress-smart-online-order-for-clover-plugin-1-5-5-csrf-leading-to-coupon-creation-modification-vulnerability?_s_id=cve vdb-entry