Appsbd vulnerabilities

Products

• Vitepos 11
• Vitepos – Point Of Sale (pos) For Woocommerce 3
• Simple Notification 2

Newest

• appsbd vitepos – point of sale (pos) for woocommerce Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter CVE-2026-92766 7.5 HighOctober 16, 2026
• appsbd vitepos – point of sale (pos) for woocommerce Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator CVE-2026-109414 6.5 MediumOctober 16, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability CVE-2026-105076 7.6 HighOctober 8, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability CVE-2026-96815 7.2 HighSeptember 30, 2026
• appsbd vitepos Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report CVE-2026-14238 4.1 MediumAugust 10, 2026
• appsbd vitepos Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation CVE-2026-14237 7.2 HighAugust 10, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability CVE-2026-57385 8.5 HighJuly 13, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability CVE-2026-54841 7.5 HighJune 25, 2026
• appsbd vitepos Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation CVE-2026-8157 8.8 HighJune 22, 2026
• appsbd vitepos – point of sale (pos) for woocommerce Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution CVE-2025-13156 Public exploit 8.8 HighNovember 21, 2025
• appsbd vitepos WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability CVE-2025-39535 7.2 HighApril 17, 2025
• appsbd vite coupon WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability CVE-2025-32642 9.6 CriticalApril 9, 2025
• appsbd vitepos WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability CVE-2025-22277 8.8 HighApril 1, 2025
• appsbd simple notification Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-13866 6.4 MediumMarch 5, 2025
• appsbd vitepos WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability CVE-2025-26750 6.5 MediumFebruary 22, 2025
• appsbd simple notification WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability CVE-2024-54242 6.5 MediumDecember 13, 2024
• appsbd elite notification – sales popup, social proof, fomo & woocommerce notification WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-54241 6.5 MediumDecember 13, 2024
• appsbd mini cart drawer for woocommerce WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability CVE-2023-47694 5.4 MediumDecember 9, 2024
• appsbd vitepos WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability CVE-2024-33574 4.3 MediumMay 8, 2024
• appsbd best support system An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested... CVE-2020-24963 Public exploit 5.4 MediumSeptember 4, 2020