Advisories · Technology
kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce.
Every CVE that names kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine
- kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce
- Code injection
- CVSS 6.5 Medium
WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter
- kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce
- Path traversal
- CVSS 4.3 Medium
WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
- kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce
- CWE-345