CVE-2026-62117
HighCVSS 8.5Summary
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 is vulnerable to SQL injection exploitable by a subscriber-level user. The flaw allows manipulation of database queries.
Risk Assessment
A subscriber can perform SQL injection, risking leakage, modification or deletion of site database data.
Recommendation
Update the Barcode Scanner with Inventory & Order Manager plugin to a version newer than 1.13.1.
Other vulnerabilities in Barcode Scanner with Inventory & Order Manager
See all- CVE-2026-62118High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 has a broken access control flaw exploitable by an unauthenticated attacker. This allows access to functions or data that should be protected.
- CVE-2026-62116High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 contains a Cross Site Scripting (XSS) flaw exploitable by an unauthenticated attacker. This allows injection of malicious script into site pages.
Original NVD description (English source)
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS