Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)

Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) has 19 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 19 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 4 high. 2024 was the busiest year with 11 disclosures.

The most common weakness is SQL Injection, behind 4 of the records (21%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 19 issues recorded for Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) has a vendor fix available, so running the current release closes all known holes.

13 independent researchers contributed these findings, most of them (4) reported by Rafie Muhammad. Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

01234567891003.08.2021Today08.01.20249.8Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile CVSS 9.8 · 08.01.20249.8Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken CVSS 9.8 · 08.01.202415.03.20246.1Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Reflected Cross-Site Scripting CVSS 6.1 · 15.03.202416.04.20246.4Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Missing Authorization CVSS 6.4 · 16.04.202425.04.20245.3Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Missing Authorization CVSS 5.3 · 25.04.20249.8Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Unauthenticated Privilege Escalation CVSS 9.8 · 25.04.202430.04.20248.8Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Authenticated (Subscriber+) SQL Injection CVSS 8.8 · 30.04.202407.05.20244.3Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Cross-Site Request Forgery CVSS 4.3 · 07.05.20245.3Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Unauthenticated Information Exposure CVSS 5.3 · 07.05.202411.07.20248.5Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection CVSS 8.5 · 11.07.202410.12.20246.1Barcode Scanner with Inventory & Order Manager <= 1.6.6 - Reflected Cross-Site Scripting CVSS 6.1 · 10.12.202415.01.20257.2Barcode Scanner with Inventory & Order Manager <= 1.6.7 - Authenticated (Admin+) Arbitrary File Upload CVSS 7.2 · 15.01.202514.08.20254.9Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download CVSS 4.9 · 14.08.202515.10.20252.7Barcode Scanner with Inventory & Order Manager <= 1.10.4 - Authenticated (Shop Manager+) Directory Traversal CVSS 2.7 · 15.10.202518.03.20264.3Barcode Scanner with Inventory & Order Manager <= 1.11.0 - Cross-Site Request Forgery CVSS 4.3 · 18.03.202615.04.20269.8Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication CVSS 9.8 · 15.04.202607.10.20265.3Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Missing Authorization CVSS 5.3 · 07.10.20267.2Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 07.10.20266.5Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 07.10.2026

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

19

Get automatic notifications for all Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-4880

Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

Read the full analysis

Vulnerability Records

19 records
2026-10-07 00:00CVE-2026-62118
5.3
Medium
she11fYes
2026-10-07 00:00CVE-2026-62116
7.2
High
hhhaiYes
2026-10-07 00:00CVE-2026-62117
6.5
Medium
she11fYes
2026-04-15 11:13CVE-2026-4880
9.8
Critical
0xd4rk5id3Yes
2026-03-18 00:00CVE-2026-42645
4.3
Medium
Legion HunterYes
2025-10-15 00:00CVE-2025-58972
2.7
Low
ChuongVNYes
2025-08-14 00:00CVE-2025-54715
4.9
Medium
domiee13Yes
2025-01-15 00:00CVE-2025-22723
7.2
High
I8BLYes
2024-12-10 00:00CVE-2024-54265
6.1
Medium
Jingle BellsYes
2024-07-11 00:00CVE-2024-38708
8.5
High
akas wisnu ajiYes
Showing 1–10 of 19 reports
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) banner
Latestv1.13.6

Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)

Dmitry V. (CEO of "UKR Solution")

Author

Dmitry V. (CEO of "UKR Solution")

5.0(52)
100/100
Last Updated
2026-10-09 (19d ago)
Active Installs
700+
Downloads
45,261
Requires WP
5.3+
Requires PHP
8.0+
Tested up to
WP 7.1.3
Created
2021-08-03 (5y ago)

✔ Find products/orders by scanning barcodes or by name/SKU/Id ✔ Manage product stock, prices and other product data ✔ Point of Sale (POS) – create orders by scanning barcodes This plugin for WooCommerce allows you to scan barcodes and manage your inventory/orders more efficiently. After barcode is scanned, plugin starts to search item automatically and displays product/order you were looking for. Also this plugin provides Point Of Sale (POS) functionality, so you can create WooCommerce orders right from the work place or checkout counter. You can also switch to the “Enter” mode and search products/orders manually by typing ID/SKU/NAME/etc – and product/order will be found. We pay a lot of attention to search speed optimization, so even shops with thousands of items can count on fast responsiveness and comfortable work. Plugin is fully compatible with WooCommerce. Main features of barcode scanner: Supports all types of barcode scanners Product and order search by barcode scanning Review & edit basic product information Manage stock quantity, price, etc. Search of orders Review order information Creation of new orders (POS functionality) Consider to upgrade to full version: Order fulfillment – Allows to fulfill orders by picking the product and scanning its barcode, system tells if product from this order or not. Mobile App – Allows you to manage inventory and orders from your iOS or Android devices Customization of product/order view – Add more custom product/order fields to the barcode scanner. Barcode auto-actions – Set action to trigger each time you scan the barcode (like quantity increase or decrease) , so you even don’t have to touch a keyboard or mouse to manage inventory/orders. Search by any custom field – By default plugin allows to do search by Product ID, SKU, Name, however in Pro version you can specify any other custom field (like UPC, EAN, etc) by which search should be done. Order Receipts – Each order will have its own receipt ready to print. Permissions – Grant different user roles different access to barcode scanner features. “Direct DB” mode – Dramatically increases work of the barcode scanner, reduces server delays and preloaders time. Possible use cases: Quick search of item: If you have to search for products/orders regularly and you type id/sku/name manually – you may increase your productivity by using barcode scanner. You will need to scan product/order barcode and it will be found as fast as possible without any additional interaction with keyboard. Point of Sale (POS): You can use barcode scanner as a Point of Sale (POS) system to create orders in offline stores. You simply scan products which your customer wants to buy, and you will see prices for each item along with total order price. POS functionality also includes price adjustment for added products to the order and possibility to edit the end price of the order. POS also allows to specify order status, final order price, apply coupons, specify WooCommerce user, etc. Restocking items: If you received new products from your vendor, you can use “auto actions” to increase products quantity in WooCommerce simply by scanning items. Product quantity will be increased each time you scan a barcode and the success or error sound will be played. So, you even don’t have to look at the screen to understand if it worked or not. Order fulfillment / Item picking Speed up order fulfillment and eliminate packing mistakes with barcode verification. Open order and scan each product’s barcode. When the scanned item matches the order, it is automatically marked as Picked. If the wrong product is scanned, you’ll know immediately before it is packed. Monitor the picking progress of every order and instantly see whether it is Not Picked, Partially Picked, or Fully Picked. Your use case may be different, however barcode scanning & quick search is always helpful tool and can be adopted to stock management process. More information about Barcode Scanner plugin here: Barcode Scanner Plugin FAQ [Front-end source code] (https://github.com/ukrsolution/Barcode-Scanner-Front-end)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C