kilbot vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20251
3. 20263

Newest CVEs

• CVE-2026-17581

  WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine

  kilbot · WCPOS – Point of Sale (POS) plugin for WooCommerce

  High7.2
• CVE-2026-16078

  WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter

  kilbot · WCPOS – Point of Sale (POS) plugin for WooCommerce

  Medium6.5
• CVE-2026-52711

  WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability

  kilbot · WooCommerce POS

  High7.5
• CVE-2025-48117

  WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability

  kilbot · WooCommerce POS

  Medium5.3
• CVE-2024-2384

  WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure

  kilbot · WCPOS – Point of Sale (POS) plugin for WooCommerce

  Medium4.3