Smart Online Order for Clover
Smart Online Order for Clover has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 14 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 8 disclosures.
The most common weakness is Cross-Site Scripting, behind 6 of the records (43%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).
Every one of the 14 issues recorded for Smart Online Order for Clover has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, most of them (3) reported by she11f. Smart Online Order for Clover is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-66700Smart Online Order for Clover <= 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Smart Online Order for Clover
Author
ZAYTECH
NOTE: This plugin requires a Clover POS & our Clover marketplace application “Smart Online Order + WordPress” (subscription required). — Please contact us at support@zaytech.com if you need help installing or setting up the plugin and application. With Smart Online Order for Clover you can easily integrate and import your Clover inventory to show on your website in real-time. This will allow you to accept Online Orders from your website. All you need is a Clover POS to easily display your menu on your website. Allow customers to place orders from your website and then have the orders print to your Clover POS. All orders can either automatically print or you can have the orders manually print. View all orders from your Clover POS. View daily/weekly/monthly reports from your Clover. This plugin is the ideal solution to get your business on-line in less than 10 minutes. It’s also easy to do it yourself, if you get stuck, there are step by step instructions on You Tube – Search “Smart Online Order” on YouTube. How it works After installing the Smart Online Order for Clover plugin, add the pages “Order Online”, “Checkout” and “My Orders” by going to Appearance then Menu from the WordPress Dashboard. Then sync your website with your Clover POS using “Import inventory”. There are also shortcodes that you can use. You would simply add the short-codes in a new post/page or an existing one. If you already spent lots of time building out your Shop page using Woo-Commerce and would like to use your current Woo-Commerce inventory and then have those orders sent to the Clover – then, no worries we also have a solution for that. It is called Woo-Commerce Payment Gateway for Clover. You would still use the same app from the Clover App market “Smart Online Order” to receive your Woo-Commerce orders. Click here to use Woo-Commerce payment integration Click Here to compare the difference of whether to use your Clover Inventory or Woo-Commerce Inventory. You can also visit smartonlineorder.com For Non-Wordpress websites, (we can create the online order page using WordPress and then you would link it to your website. The main difference of having a WordPress website is that the Online Ordering can be up and running in less than 10 minutes. Give us a call or send us an email if you don’t have a WordPress website so we can create for you the Online Ordering page so you can link it to your website. If you don’t have any kind of website and don’t know where to start, give us a call or send us an email as we can make you a website with Online Ordering. Below are just a few websites currently using Smart Online Order with their Clover POS. Deli Zone Dragon Wok Fast Pizza Halal Burgers Hawaiian Style Grill Himalayan Fusion Lake Avenue Minami Sushi Mount Everest Cuisine Pho Kitchen Pretzel Stop RU Cookie Munchers She’s Cafe and Catering Vin House Tea & Coffee Yoway Eatery Some websites we built, other websites were built by the merchant themselves or developers they hired.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C