VP
Product
Vitepos – Point of Sale (POS) for WooCommerce
3
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Vitepos – Point of Sale (POS) for WooCommerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13156 | 8.8 | Nov 21 | Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution Affected: through 3.3.0 |
| CVE-2026-92766 | 7.5 | Oct 16 | Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter Affected: through 3.5.1 |
| CVE-2026-109414 | 6.5 | Oct 16 | Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator Affected: through 3.6.1 |
Showing 3