Appsbd vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20256
3. 20266

Newest CVEs

• CVE-2026-92766

  Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter

  appsbd · Vitepos – Point of Sale (POS) for WooCommerce

  High7.5
• CVE-2026-109414

  Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator

  appsbd · Vitepos – Point of Sale (POS) for WooCommerce

  Medium6.5
• CVE-2026-105076

  WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

  Appsbd · Vitepos

  High7.6
• CVE-2026-96815

  WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability

  appsbd · Vitepos

  High7.2
• CVE-2026-57385

  WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability

  appsbd · Vitepos

  High8.5
• CVE-2026-54841

  WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability

  Appsbd · Vitepos

  High7.5
• CVE-2025-13156

  Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

  appsbd · Vitepos – Point of Sale (POS) for WooCommerce

  High8.8
• CVE-2025-39535

  WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

  appsbd · Vitepos

  High7.2
• CVE-2025-32642

  WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability

  appsbd · Vite Coupon

  Critical9.6
• CVE-2025-22277

  WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

  appsbd · Vitepos

  High8.8