CVE-2026-62117
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 is vulnerable to SQL injection exploitable by a subscriber-level user. The flaw allows manipulation of database queries.
Risk Assessment
A subscriber can perform SQL injection, risking leakage, modification or deletion of site database data.
Recommendation
Update the Barcode Scanner with Inventory & Order Manager plugin to a version newer than 1.13.1.
Other vulnerabilities in Barcode Scanner with Inventory & Order Manager
See all- CVE-2026-62118High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 has a broken access control flaw exploitable by an unauthenticated attacker. This allows access to functions or data that should be protected.
- CVE-2026-62116High
The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 contains a Cross Site Scripting (XSS) flaw exploitable by an unauthenticated attacker. This allows injection of malicious script into site pages.
- CVE-2026-42645Medium
The Barcode Scanner with Inventory & Order Manager plugin (barcode-scanner-lite-pos-to-manage-products-inventory-and-orders) by Dmitry V. contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects versions up to and including 1.11.0.
Original NVD description (English source)
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS