Appsbd Vitepos – Point of Sale (POS) for WooCommerce

• CVE-2026-92766 High 7.5 Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter 0.3%
• CVE-2026-109414 Medium 6.5 Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator 0.3%
• CVE-2025-13156 High 8.8 Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution 0.7%