cleantalk
Vulnerabilities and Security Researches

Smart Online Order for Clover, CVE-2025-15635

CVE, Research URL

CVE-2025-15635

Home page URL

Security reports for Smart Online Order for Clover

Application

Smart Online Order for Clover

Published on
Apr 15, 2026
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through 1.6.0.
Affected versions
max 1.6.0.
Status
vulnerable
Previous vulnerability researches
WooCommerce Redsys Gateway Light (CVE-2026-5050) , Apr 16, 2026
New vulnerability
Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader. (CVE-2026-4880) , Apr 17, 2026
OneSignal – Web Push Notifications (CVE-2026-3155) , Apr 17, 2026
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid (CVE-2026-40728) , Apr 17, 2026
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support (CVE-2026-3875) , Apr 17, 2026
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, (CVE-2026-40745) , Apr 17, 2026