Skip to content
OpenAdvisories

Vendor

oliverpos

4 known vulnerabilities.

Products

Oliver POS – A WooCommerce Point of Sale (POS) 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-6072

    Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header

    The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.4.2.6. The plugin protects its entire /wp-json/pos-bridge/* REST API namespace thro…

    oliverpos Oliver POS – A WooCommerce Point of Sale (POS) Web / CMS
  • Medium 6.3
    CVE-2024-1954

    Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.1.8 - Cross-Site Request Forgery

    The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1.8. This is due to missing or incorrect nonce validation in the includes/class-pos-bridge-install.ph…

    oliverpos Oliver POS – A WooCommerce Point of Sale (POS) Web / CMS