Barcode Scanner With Inventory Order Manager
Monthly
Cross-Site Request Forgery in the WordPress 'Barcode Scanner with Inventory & Order Manager' plugin (versions up to and including 1.11.0) allows a remote unauthenticated attacker to induce an authenticated WordPress user into performing unintended state-changing actions on the plugin's behalf. Exploitation requires tricking a logged-in user into visiting a crafted page, consistent with the CVSS UI:R designation and SSVC automatable:no classification. No public exploit has been identified at time of analysis, and EPSS places this at the 3rd percentile (0.01%), indicating negligible observed exploitation pressure.
Cross-Site Request Forgery in the WordPress 'Barcode Scanner with Inventory & Order Manager' plugin (versions up to and including 1.11.0) allows a remote unauthenticated attacker to induce an authenticated WordPress user into performing unintended state-changing actions on the plugin's behalf. Exploitation requires tricking a logged-in user into visiting a crafted page, consistent with the CVSS UI:R designation and SSVC automatable:no classification. No public exploit has been identified at time of analysis, and EPSS places this at the 3rd percentile (0.01%), indicating negligible observed exploitation pressure.