Vitepos vulnerabilities
We track 2 vulnerabilities in Vitepos products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Vitepos vulnerabilities
- 7.2 High severity
vitepos: Improper Privilege Management
The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not perform a per-target authorization check in their point-of-sale password-reset API and grant the custom Outlet Manager role an over-broad password-reset capability by defau
- 8.8 High severity
Vitepos: Improper Privilege Management
The Vitepos WordPress plugin before 3.4.2 does not properly restrict the roles that can be assigned when creating new users via one of its REST API endpoints, allowing authenticated users with a custom Vitepos WordPress plugin before 3.4.2 role to escalate pri