Skip to content
OpenAdvisories

Vendor

Appsbd

16 known vulnerabilities.

Products

Vitepos 8 Vitepos – Point of Sale (POS) for WooCommerce 3 Simple Notification 2 Vite Coupon 1 Mini Cart Drawer For WooCommerce 1 Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-109414

    Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator

    The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on t…

    Appsbd Vitepos – Point of Sale (POS) for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2024-13866

    Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administra…

    Appsbd Simple Notification Web / CMS
  • Medium 6.5
    CVE-2025-26750

    WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through <= 3.1.3.

    Appsbd Vitepos
  • Medium 6.5
    CVE-2024-54241

    WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability

    Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social P…

    Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification Web / CMS
  • Medium 6.5
    CVE-2024-54242

    WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.

    Appsbd Simple Notification
  • Medium 5.4
    CVE-2023-47694

    WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mini Cart Drawer For WooCommerce: from n/a through 4.0.0.

    Appsbd Mini Cart Drawer For WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-33574

    WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1.

    Appsbd Vitepos