Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)

Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) has 16 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 16 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 3 high. 2024 was the busiest year with 11 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (19%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 16 issues recorded for Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) has a vendor fix available, so running the current release closes all known holes.

11 independent researchers contributed these findings, most of them (4) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-4880

Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

Read the full analysis

Vulnerability Records

16 records


2026-04-15 11:13	Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication Barcode Scanner (+Mobile App) <= 1.11.0	`CVE-2026-4880`	9.8 Critical	0xd4rk5id3	Yes
2026-03-18 00:00	Barcode Scanner with Inventory & Order Manager <= 1.11.0 - Cross-Site Request Forgery Barcode Scanner (+Mobile App) <= 1.11.0	`CVE-2026-42645`	4.3 Medium	Legion Hunter	Yes
2025-10-15 00:00	Barcode Scanner with Inventory & Order Manager <= 1.10.4 - Authenticated (Shop Manager+) Directory Traversal Barcode Scanner (+Mobile App) <= 1.10.4	`CVE-2025-58972`	2.7 Low	ChuongVN	Yes
2025-08-14 00:00	Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download Barcode Scanner (+Mobile App) <= 1.9.0	`CVE-2025-54715`	4.9 Medium	domiee13	Yes
2025-01-15 00:00	Barcode Scanner with Inventory & Order Manager <= 1.6.7 - Authenticated (Admin+) Arbitrary File Upload Barcode Scanner (+Mobile App) <= 1.6.7	`CVE-2025-22723`	7.2 High	I8BL	Yes
2024-12-10 00:00	Barcode Scanner with Inventory & Order Manager <= 1.6.6 - Reflected Cross-Site Scripting Barcode Scanner (+Mobile App) <= 1.6.6	`CVE-2024-54265`	6.1 Medium	Jingle Bells	Yes
2024-07-11 00:00	Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection Barcode Scanner (+Mobile App) <= 1.6.1	`CVE-2024-38708`	8.5 High	akas wisnu aji	Yes
2024-05-07 00:00	Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Unauthenticated Information Exposure Barcode Scanner (+Mobile App) <= 1.5.4	`CVE-2024-34556`	5.3 Medium	Dhabaleshwar Das	Yes
2024-05-07 00:00	Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Cross-Site Request Forgery Barcode Scanner (+Mobile App) <= 1.5.4	`CVE-2024-34557`	4.3 Medium	Dhabaleshwar Das	Yes
2024-04-30 00:00	Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Authenticated (Subscriber+) SQL Injection Barcode Scanner (+Mobile App) <= 1.5.4	`CVE-2024-2661`	8.8 High	Peter Thaleikis	Yes

Showing 1–10 of 16 reports