Appsbd Vitepos vulnerabilities

• appsbd vitepos – point of sale (pos) for woocommerce Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter CVE-2026-92766 7.5 HighOctober 16, 2026
• appsbd vitepos – point of sale (pos) for woocommerce Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator CVE-2026-109414 6.5 MediumOctober 16, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability CVE-2026-105076 7.6 HighOctober 8, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability CVE-2026-96815 7.2 HighSeptember 30, 2026
• appsbd vitepos Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report CVE-2026-14238 4.1 MediumAugust 10, 2026
• appsbd vitepos Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation CVE-2026-14237 7.2 HighAugust 10, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability CVE-2026-57385 8.5 HighJuly 13, 2026
• appsbd vitepos WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability CVE-2026-54841 7.5 HighJune 25, 2026
• appsbd vitepos Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation CVE-2026-8157 8.8 HighJune 22, 2026
• appsbd vitepos – point of sale (pos) for woocommerce Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution CVE-2025-13156 Public exploit 8.8 HighNovember 21, 2025
• appsbd vitepos WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability CVE-2025-39535 7.2 HighApril 17, 2025
• appsbd vitepos WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability CVE-2025-22277 8.8 HighApril 1, 2025
• appsbd vitepos WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability CVE-2025-26750 6.5 MediumFebruary 22, 2025
• appsbd vitepos WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability CVE-2024-33574 4.3 MediumMay 8, 2024