AP
Vendor
appsbd
17
CVEs
0
On KEV
4
New 30D
Products
VI8.8
Vitepos
appsbd
8 CVEs0 on KEV2 new
VP8.8
Vitepos – Point of Sale (POS) for WooCommerce
appsbd
3 CVEs0 on KEV2 new
SN6.5
Simple Notification
appsbd
2 CVEs0 on KEV0 new
BS5.4
Best Support System
Appsbd
1 CVEs0 on KEV0 new
EN6.5
Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification
Appsbd
1 CVEs0 on KEV0 new
MC5.4
Mini Cart Drawer For WooCommerce
appsbd
1 CVEs0 on KEV0 new
VC10.0
Vite Coupon
appsbd
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92766 | VP Vitepos – Point of Sale (POS) for WooCommerce appsbd | 7.5 | Oct 16 | Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter |
| CVE-2026-109414 | VP Vitepos – Point of Sale (POS) for WooCommerce appsbd | 6.5 | Oct 16 | Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator |
| CVE-2026-105076 | VI Vitepos Appsbd | 7.6 | Oct 8 | WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability |
| CVE-2026-96815 | VI Vitepos appsbd | 7.2 | Sep 30 | WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability |
| CVE-2026-57385 | VI Vitepos appsbd | 8.5 | Jul 13 | WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability |
| CVE-2026-54841 | VI Vitepos Appsbd | 7.5 | Jun 25 | WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability |
| CVE-2025-13156 | VP Vitepos – Point of Sale (POS) for WooCommerce appsbd | 8.8 | Nov 21 | Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution |
| CVE-2025-39535 | VI Vitepos appsbd | 7.2 | Apr 17 | WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability |
| CVE-2025-32642 | VC Vite Coupon appsbd | 10.0 | Apr 9 | WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability |
| CVE-2025-22277 | VI Vitepos appsbd | 8.8 | Apr 1 | WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability |
| CVE-2024-13866 | SN Simple Notification appsbd | 6.4 | Mar 5 | Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2025-26750 | VI Vitepos appsbd | 6.5 | Feb 22 | WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability |
| CVE-2024-54242 | SN Simple Notification appsbd | 6.5 | Dec 13 | WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability |
| CVE-2024-54241 | EN Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification Appsbd | 6.5 | Dec 13 | WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-47694 | MC Mini Cart Drawer For WooCommerce appsbd | 5.4 | Dec 9 | WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability |
| CVE-2024-33574 | VI Vitepos appsbd | 4.3 | May 8 | WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability |
| CVE-2020-24963 | BS Best Support System Appsbd | 5.4 | Sep 4 | An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4 |