Vitepos – Point of Sale (POS) for WooCommerce vulnerabilities

2 known vulnerabilities in Vitepos – Point of Sale (POS) for WooCommerce from Appsbd. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Vitepos – Point of Sale (POS) for WooCommerce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-92766Oct 16, 2026Appsbd

  The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of suffici

• 8.8 High severity

  Vitepos – Point of Sale (POS) for WooCommerce: Unrestricted Upload of File with Dangerous Type

  CVE-2025-13156Nov 21, 2025Appsbd

  The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the insert_media_attachment() function in all versions up to, and including, 3.3.0. This is due to the save_up