What’s Vulnerable › Products
kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce version is affected
Latest kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce vulnerabilities
- CVE-2026-17581 — WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine (CVSS 7.2)
- CVE-2026-16078 — WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter (CVSS 6.5)
- CVE-2024-2384 — WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure (CVSS 4.3)