WordPress plugin
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical4
- High4
- Medium10
- Low1
All Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.13.1Update to 1.13.6 | CVE-2026-62118 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.13.1Update to 1.13.6 | CVE-2026-62116 | |
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤1.13.1Update to 1.13.6 | CVE-2026-62117 | |
| Critical9.8 | Unauthenticated Privilege Escalation via Insecure Token Authentication ≤1.11.0Update to 1.12.0 | CVE-2026-4880 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.11.0Update to 1.12.0 | CVE-2026-42645 | |
| Low2.7 | Authenticated (Shop Manager+) Directory Traversal ≤1.10.4Update to 1.10.5 | CVE-2025-58972 | |
| Medium4.9 | Authenticated (Admin+) Arbitrary File Download ≤1.9.0Update to 1.9.1 | CVE-2025-54715 | |
| High7.2 | Authenticated (Admin+) Arbitrary File Upload ≤1.6.7Update to 1.7.0 | CVE-2025-22723 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.6.6Update to 1.6.7 | CVE-2024-54265 | |
| High8.5 | Authenticated (Subscriber+) SQL Injection ≤1.6.1Update to 1.6.2 | CVE-2024-38708 | |
| Medium5.3 | Unauthenticated Information Exposure ≤1.5.4Update to 1.5.5 | CVE-2024-34556 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.5.4Update to 1.5.5 | CVE-2024-34557 | |
| High8.8 | Authenticated (Subscriber+) SQL Injection ≤1.5.4Update to 1.5.5 | CVE-2024-2661 | |
| Medium5.3 | Missing Authorization ≤1.5.3Update to 1.5.4 | CVE-2024-33565 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤1.5.3Update to 1.5.4 | CVE-2024-33567 | |
| Medium6.4 | Missing Authorization ≤1.5.3Update to 1.5.4 | CVE-2024-32589 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.5.3Update to 1.5.4 | CVE-2024-27998 | |
| Critical9.8 | Unauthenticated SQL Injection via userToken <1.5.2Update to 1.5.2 | CVE-2023-52215 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload via uploadFile ≤1.5.1Update to 1.5.2 | CVE-2023-52221 |
- Medium5.3Missing Authorization
≤1.13.1Update to 1.13.6
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.13.1Update to 1.13.6
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤1.13.1Update to 1.13.6
- Critical9.8Unauthenticated Privilege Escalation via Insecure Token Authentication
≤1.11.0Update to 1.12.0
- Medium4.3Cross-Site Request Forgery
≤1.11.0Update to 1.12.0
- Low2.7Authenticated (Shop Manager+) Directory Traversal
≤1.10.4Update to 1.10.5
- Medium4.9Authenticated (Admin+) Arbitrary File Download
≤1.9.0Update to 1.9.1
- High7.2Authenticated (Admin+) Arbitrary File Upload
≤1.6.7Update to 1.7.0
- Medium6.1Reflected Cross-Site Scripting
≤1.6.6Update to 1.6.7
- High8.5Authenticated (Subscriber+) SQL Injection
≤1.6.1Update to 1.6.2
- Medium5.3Unauthenticated Information Exposure
≤1.5.4Update to 1.5.5
- Medium4.3Cross-Site Request Forgery
≤1.5.4Update to 1.5.5
- High8.8Authenticated (Subscriber+) SQL Injection
≤1.5.4Update to 1.5.5
- Medium5.3Missing Authorization
≤1.5.3Update to 1.5.4
- Critical9.8Unauthenticated Privilege Escalation
≤1.5.3Update to 1.5.4
- Medium6.4Missing Authorization
≤1.5.3Update to 1.5.4
- Medium6.1Reflected Cross-Site Scripting
≤1.5.3Update to 1.5.4
- Critical9.8Unauthenticated SQL Injection via userToken
<1.5.2Update to 1.5.2
- Critical9.8Unauthenticated Arbitrary File Upload via uploadFile
≤1.5.1Update to 1.5.2
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale): common questions
Does Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale): 4 critical, 4 high, 10 medium, 1 low. None are known to affect version null.
How do I check which version of Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) vulnerability?
CVE-2026-62118, published Oct 7, 2026: Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) vulnerability listed in CISA KEV?
No. None of the known Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) vulnerabilities is currently listed in the CISA KEV catalog.