{"id":"CVE-2024-38708","aliases":["EUVD-2024-37559","GHSA-xfq7-jp86-6q6q"],"status":"published","title":"WordPress Barcode Scanner and Inventory manager plugin \u003c= 1.6.1 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory \u0026 Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory \u0026 Order Manager: from n/a through \u003c= 1.6.1.","severity":{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00455,"percentile":0.39771,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-07-22T10:10:49Z","modified":"2026-06-17T07:40:54Z","products":[{"vendor":"dmitry v. (ceo of \"ukr solution\")","product":"barcode scanner with inventory \u0026 order manager"},{"vendor":"ukrsolution","product":"barcode_scanner_and_inventory_manager"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-and-inventory-manager-plugin-1-6-1-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://patchstack.com/database/vulnerability/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/wordpress-barcode-scanner-and-inventory-manager-plugin-1-6-1-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38708"},{"url":"https://github.com/advisories/GHSA-xfq7-jp86-6q6q"}],"sources":{"cve":[{"id":"CVE-2024-38708","title":"WordPress Barcode Scanner and Inventory manager plugin \u003c= 1.6.1 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory \u0026 Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory \u0026 Order Manager: from n/a through \u003c= 1.6.1.","status":"published","published":"2024-07-22T10:10:49.879Z","modified":"2026-04-28T16:10:05.083Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-37559","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory \u0026 Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory \u0026 Order Manager: from n/a through \u003c= 1.6.1.","status":"published","published":"2024-07-22T10:10:49Z","modified":"2026-04-28T16:10:05Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:06:01.810954Z"}],"ghsa":[{"id":"GHSA-xfq7-jp86-6q6q","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Barcode Scanner with Inventory \u0026 Order Manager allows SQL Injection.This issue affects Barcode Scanner with Inventory \u0026 Order Manager: from n/a through 1.6.1.","status":"published","published":"2024-07-22T12:30:37Z","modified":"2026-04-01T18:32:57Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:06:59.878471Z"}],"nvd":[{"id":"CVE-2024-38708","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory \u0026 Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory \u0026 Order Manager: from n/a through \u003c= 1.6.1.","status":"published","published":"2024-07-22T11:15:03.427Z","modified":"2026-06-17T07:40:54.29Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:13.413515Z"}]}}