CVE-2025-22723: WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability

9.1 CVSS

Description

Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Upload a Web Shell to a Web Server. This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.6.7.

Classification

CVE ID: CVE-2025-22723

CVSS Base Severity: CRITICAL

CVSS Base Score: 9.1

Affected Products

Vendor: UkrSolution

Product: Barcode Scanner with Inventory & Order Manager

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.7% (scored less or equal to compared to others)

EPSS Date: 2025-02-19 (when was this score calculated)

References

https://patchstack.com/database/wordpress/plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-and-inventory-manager-plugin-1-6-7-arbitrary-file-upload-vulnerability?_s_id=cve

Timeline