FooSales vulnerabilities
We track 2 vulnerabilities in FooSales products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest FooSales vulnerabilities
- 8.8 High severity
FooSales – Point of Sale (POS) for WooCommerce: Improper Privilege Management
The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updati
- 8.8 High severity
FooSales: Improper Privilege Management
The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, includi