Skip to content
OpenAdvisories

Vendor

foosales

1 known vulnerabilities.

Products

FooSales – Point of Sale (POS) for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-77183

    FooSales <= 1.43.0 - Authenticated (Custom+) Privilege Escalation via create_update_customer REST Endpoint

    The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updat…

    foosales FooSales – Point of Sale (POS) for WooCommerce Web / CMS