What’s Vulnerable › Products
appsbd Vitepos – Point of Sale (POS) for WooCommerce vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your appsbd Vitepos – Point of Sale (POS) for WooCommerce version is affected
Latest appsbd Vitepos – Point of Sale (POS) for WooCommerce vulnerabilities
- CVE-2026-92766 — Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter (CVSS 7.5)
- CVE-2026-109414 — Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator (CVSS 6.5)
- CVE-2025-13156 — Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution (CVSS 8.8)