Skip to content
OpenAdvisories

Vendor

kilbot

5 known vulnerabilities.

Products

WCPOS – Point of Sale (POS) plugin for WooCommerce 3 WooCommerce POS 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-17581

    WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine

    The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions up to, and including, 1.9.14 due to the Receipt_Renderer_Factory dispatching templates with the 'ther…

    kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce Web / CMS
  • High 7.5
    CVE-2026-52711

    WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.

    kilbot WooCommerce POS Web / CMS