Skip to content
OpenAdvisories

Vendor

Appsbd

16 known vulnerabilities.

Products

Vitepos 8 Vitepos – Point of Sale (POS) for WooCommerce 3 Simple Notification 2 Vite Coupon 1 Mini Cart Drawer For WooCommerce 1 Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-13156 Public exploit

    Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

    The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the insert_media_attachment() function in all versions up to, and including, 3.3.0. This is due to the save_u…

    Appsbd Vitepos – Point of Sale (POS) for WooCommerce Web / CMS