CVE-2026-62118
HighCVSS 7.3Summary
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 has a broken access control flaw exploitable by an unauthenticated attacker. This allows access to functions or data that should be protected.
Risk Assessment
An unauthenticated attacker may gain access to protected functions or data, potentially leading to modification of inventory or orders.
Recommendation
Update the Barcode Scanner with Inventory & Order Manager plugin to a version newer than 1.13.1.
Other vulnerabilities in Barcode Scanner with Inventory & Order Manager
See all- CVE-2026-62117High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 is vulnerable to SQL injection exploitable by a subscriber-level user. The flaw allows manipulation of database queries.
- CVE-2026-62116High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 contains a Cross Site Scripting (XSS) flaw exploitable by an unauthenticated attacker. This allows injection of malicious script into site pages.
Original NVD description (English source)
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS