TillKit vulnerabilities
We track 1 vulnerability in TillKit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest TillKit vulnerabilities
- 8.2 High severity
TillKit: Improper Authentication
The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS account it creates on activation to be changed before use, and it authenticates its public POS login endpoint on that PIN alone with no identity