Barcode Scanner with Inventory & Order Manager vulnerabilities

The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 has a broken access control flaw exploitable by an unauthenticated attacker. This allows access to functions or data that should be protected.

The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 is vulnerable to SQL injection exploitable by a subscriber-level user. The flaw allows manipulation of database queries.

The Barcode Scanner with Inventory & Order Manager plugin in versions up to and including 1.13.1 contains a Cross Site Scripting (XSS) flaw exploitable by an unauthenticated attacker. This allows injection of malicious script into site pages.

The Barcode Scanner with Inventory & Order Manager plugin (barcode-scanner-lite-pos-to-manage-products-inventory-and-orders) by Dmitry V. contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects versions up to and including 1.11.0.