vitepos_point_of_sale_pos_for_woocommerce vulnerabilities
CVEs whose affected-version data names the vitepos_point_of_sale_pos_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-92766High· 7.5Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter
The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parame…
▾ Twilightappsbd · Vitepos – Point of Sale (POS) for WooCommercevia CVEORG
CVE-2026-109414Medium· 6.5Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator
The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insu…
▾ Sunlitappsbd · Vitepos – Point of Sale (POS) for WooCommercevia CVEORG