agentprime: appsbd-vitepos-point-of-sale-pos-for-woocommerceEvery new CVE for appsbd-vitepos-point-of-sale-pos-for-woocommerce.https://agentprime.io/CVE-2026-92766: Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameterhttps://agentprime.io/advisories/CVE-2026-92766/https://agentprime.io/advisories/CVE-2026-92766/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 08:27:42 GMTCVECVE-2026-109414: Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operatorhttps://agentprime.io/advisories/CVE-2026-109414/https://agentprime.io/advisories/CVE-2026-109414/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 05:30:26 GMTCVECVE-2025-13156: Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-13156/https://agentprime.io/advisories/CVE-2025-13156/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 08:28:15 GMTCVE