CVE-2024-38708highobserved exploitationCWE-89

CVE-2024-38708: high-severity vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode…

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability

Published · Updated

Follow this CVE+ Monitor Barcode Scanner with Inventory & Order Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 8.5epss 0.5%
from disclosure to weapon
Published on NVDJul 22
VulnCheckJul 11
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.6.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Affected products
Dmitry V. (CEO of "UKR Solution") · Barcode Scanner with Inventory & Order Manager
Related CVEs — Dmitry V. (CEO of "UKR Solution") Barcode…

In the same product, most dangerous first.

CVE-2024-34556MEDIUMWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerabilityEPSS 0.6%CVE-2025-58972HIGHWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerabilityEPSS 0.5%CVE-2025-22723CRITICALWordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-54265HIGHWordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-54715MEDIUMWordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2024-27998HIGHWordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%