Kilbot vulnerabilities

Products

• Wcpos – Point Of Sale (pos) Plugin For Woocommerce 3
• Woocommerce Pos 2

Newest

• kilbot wcpos – point of sale (pos) plugin for woocommerce WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine CVE-2026-17581 7.2 HighAugust 16, 2026
• kilbot wcpos – point of sale (pos) plugin for woocommerce WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter CVE-2026-16078 6.5 MediumJuly 23, 2026
• kilbot woocommerce pos WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability CVE-2026-52711 7.5 HighJune 16, 2026
• tanstack, @tanstack arktype-adapter, eslint-plugin-router +211 more +213 more Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys CVE-2026-45321 In KEVPublic exploitFix available 9.6 CriticalMay 12, 2026
• kilbot woocommerce pos WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability CVE-2025-48117 5.3 MediumMay 16, 2025
• kilbot wcpos – point of sale (pos) plugin for woocommerce WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure CVE-2024-2384 4.3 MediumMarch 20, 2024