Skip to content
OpenAdvisories

Vendor

Appsbd

16 known vulnerabilities.

Products

Vitepos 8 Vitepos – Point of Sale (POS) for WooCommerce 3 Simple Notification 2 Vite Coupon 1 Mini Cart Drawer For WooCommerce 1 Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2026-92766

    Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter

    The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of suffic…

    Appsbd Vitepos – Point of Sale (POS) for WooCommerce Web / CMS
  • High 7.6
    CVE-2026-105076

    WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.

    Appsbd Vitepos
  • High 7.2
    CVE-2026-96815

    WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability

    Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

    Appsbd Vitepos
  • High 8.5
    CVE-2026-57385

    WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through <= 3.4.2.

    Appsbd Vitepos
  • High 7.5
    CVE-2026-54841

    WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.

    Appsbd Vitepos
  • High 8.8
    CVE-2025-13156 Public exploit

    Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

    The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the insert_media_attachment() function in all versions up to, and including, 3.3.0. This is due to the save_u…

    Appsbd Vitepos – Point of Sale (POS) for WooCommerce Web / CMS
  • High 7.2
    CVE-2025-39535

    WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through <= 3.1.7.

    Appsbd Vitepos
  • High 8.8
    CVE-2025-22277

    WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through <= 3.1.4.

    Appsbd Vitepos