Log in Start free

Appsbd

Products

ProductCVEsExploitedLatest
Vitepos8–Oct 8, 2026
Vitepos – Point of Sale (POS) for WooCommerce3–Oct 16, 2026
Simple Notification2–Mar 5, 2025
Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification1–Dec 13, 2024
Mini Cart Drawer For WooCommerce1–Dec 9, 2024
Vite Coupon1–Apr 9, 2025

Exploited and recent CVEs

  • CVE-2026-92766 High 7.5 Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter 0.3%
  • CVE-2026-109414 Medium 6.5 Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator 0.3%
  • CVE-2026-105076 High 7.6 WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability 0.2%
  • CVE-2026-96815 High 7.2 WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-57385 High 8.5 WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability 0.4%
  • CVE-2026-54841 High 7.5 WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-13156 High 8.8 Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution 0.7%
  • CVE-2025-39535 High 7.2 WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability 0.5%
  • CVE-2025-32642 Critical 9.6 WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability 0.3%
  • CVE-2025-22277 High 8.8 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability 0.5%
  • CVE-2024-13866 Medium 6.4 Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-26750 Medium 6.5 WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability 0.3%
  • CVE-2024-54242 Medium 6.5 WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability 0.4%
  • CVE-2024-54241 Medium 6.5 WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-47694 Medium 5.4 WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-33574 Medium 4.3 WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability 0.4%