Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-22723 EUVD-2025-2944GHSA-q38q-p8xv-67g9

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability

Published Jan 21, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Upload a Web Shell to a Web Server.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.6.7.

Affected products

VendorProductAffectedFixed
Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager ≤ 1.6.7 —

References