Smart Online Order for Clover, CVE-2024-7032

CVE, Research URL: CVE-2024-7032
Home page URL: Security reports for Smart Online Order for Clover
Application: Smart Online Order for Clover
Published on: Aug 21, 2024
Research Description: The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to deactivate the plugin and drop all plugin tables from the database.
Affected versions: max 1.5.7.
Status: vulnerable