Zaytech's vulnerability profile centers on its Smart Online Order for Clover, a point-of-sale integration product, where the recurring exposure reflects application-layer weaknesses in web request handling and authorization. Vulnerabilities affecting this vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and the disclosures cluster around cross-site scripting, missing authorization checks, and cross-site request forgery flaws that are characteristic of e-commerce and payment-adjacent web applications. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Zaytech over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-42746HIGH Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue aff | May 27, 2026 | 7.3 | 27 | NO | NO |
CVE-2026-42745HIGH Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects | May 27, 2026 | 7.3 | 27 | NO | NO |
CVE-2026-42738HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.T | May 27, 2026 | 7.1 | 26 | NO | NO |
CVE-2024-43253CRITICAL Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through <= 1.5.6. | Nov 1, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-31238HIGH Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5. | Apr 12, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-43254HIGH Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through <= 1.5.6. | Nov 1, 2024 | 8.8 | 23 | NO | NO |
CVE-2025-15635MEDIUM Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Orde | Apr 15, 2026 | 4.3 | 19 | NO | NO |
CVE-2024-8787MEDIUM The Smart Online Order for Clover plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escapi | Oct 16, 2024 | 6.1 | 18 | NO | NO |
CVE-2024-7032MEDIUM The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all | Aug 21, 2024 | 6.5 | 18 | NO | NO |
CVE-2023-46312MEDIUM Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zaytech Smart Online Order for Clover plugin <= 1.5.4 versions. | Oct 31, 2023 | 6.1 | 18 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Zaytech.
Media articles that mention a CVE ID that affects a product developed by Zaytech — matched by CVE ID, not by vendor name.