Woocommerce OpenPos vulnerabilities

3 known vulnerabilities in Woocommerce OpenPos from Anhvnit. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Woocommerce OpenPos: Missing Authorization

  CVE-2024-37935Aug 13, 2024Anhvnit

  Missing Authorization vulnerability in anhvnit Woocommerce OpenPos allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

• 9.3 Critical severity

  Woocommerce OpenPos: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-37933Jul 12, 2024Anhvnit

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anhvnit Woocommerce OpenPos.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

• 8.6 High severity

  Woocommerce OpenPos: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-37932Jul 12, 2024Anhvnit

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in anhvnit Woocommerce OpenPos allows File Manipulation.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.