PT-2026-43654 · Zaytech · Smart Online Order For Clover

She11F · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-42745

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ZAYTECH Smart Online Order for Clover versions prior to 1.6.0

Description An authentication bypass exists in ZAYTECH Smart Online Order for Clover, allowing an attacker to bypass authentication mechanisms by using an alternate path or channel.

Recommendations Update to a version later than 1.6.0.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-42745

Affected Products

Smart Online Order For Clover

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42745 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/clover-online-orders/vulnerability/wordpress-smart-online-order-for-clover-plugin-1-6-0-broken-authentication-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2059741667008123147 · Twitter Post